13 September 2026 - 12:17
Category: IT Fail
Passkeys Were Supposed To Save Us All
Attackers are abusing third-party email infrastructure to fish for passkeys and hijack Microsoft accounts. Just another Tuesday in IT, then.
Source: The Hacker News
The Full Story
Here we go again, as Microsoft cloud account holders find their data exfiltrated by threat actors abusing third-party email systems to blast financial fraud scams. Why do we even bother rolling out modern passkey technology when users still fall for clever social engineering trickery over breakfast? Shielding our weary organisations now means training everyone to spot passkey-themed lures and watching third-party email traffic like hawks, though experience tells me hope is a fragile thing. Same story, different day in the relentless corporate inbox.