SpecterOps uncovers zero‑day passkey flaws that let attackers replay Microsoft credentials
Researchers from SpecterOps found three near‑zero‑day vulnerabilities in Windows 11 and Microsoft Entra ID that enable a "pass‑the‑passkey" replay chain, letting adversaries impersonate privileged cloud users despite phishing‑resistant MFA. The flaws could undermine Microsoft’s upcoming default passkey rollout, raising urgent implementation concerns.