Cyber Attacks
Huntress: Passkeys Fail If Attackers Target Enrollment and Recovery Flows
Research reveals that while passkeys secure credentials, attackers bypass them by exploiting enrollment, recovery, and device code flows to gain access.
WebAuthn
Everything Threat Times has reported about WebAuthn: 2 stories, newest first. Part of our Cyber Attacks coverage.
Vulnerabilities
Nginx UI Passkey Bypass Lets Attackers Bypass 2FA in Versions Before 2.5.0
A flaw in Nginx UI allows password-only login for passkey-protected accounts, bypassing second-factor authentication in versions prior to 2.5.0.