Topic

Passkeys

Login credentials based on FIDO2 and WebAuthn public-key cryptography, held on a device or in a password manager and unlocked with a biometric or PIN, designed so that a remote attacker cannot replay or phish the secret.

Current clusters

leadership1 publisher

Fake helpdesk calls use the passkey rollout as the pretext for Microsoft 365 intrusions

Microsoft has tracked intrusions since May in which callers posing as IT told employees a passkey update was due, then steered them to a phishing page or a device-code prompt. The enrollment step is where the chain starts.

Publishers:csoonline.com

Reality

Evidence55
Adoption35
Hype gap−5
Incentives60
Confidence58