13 September 2026 - 12:17

Category: IT Fail

Passkeys Were Supposed To Save Us All

Attackers are abusing third-party email infrastructure to fish for passkeys and hijack Microsoft accounts. Just another Tuesday in IT, then.

Passkeys Were Supposed To Save Us All. Attackers are abusing third-party email infrastructure to fish for passkeys and hijack Microsoft accounts. Just another Tuesday in IT, then.

Source: The Hacker News

The Full Story

Severity: High Mood: Expected

Here we go again, as Microsoft cloud account holders find their data exfiltrated by threat actors abusing third-party email systems to blast financial fraud scams. Why do we even bother rolling out modern passkey technology when users still fall for clever social engineering trickery over breakfast? Shielding our weary organisations now means training everyone to spot passkey-themed lures and watching third-party email traffic like hawks, though experience tells me hope is a fragile thing. Same story, different day in the relentless corporate inbox.

#PasskeyFail #SameOldTuesday
Open article →