Threat actors downgrade FIDO2 MFA auth in PoisonSeed phishing attack

Phishers have found a way to downgrade—not bypass—FIDO MFA

The MFA You Trust Is Lying to You – and Here's How Attackers Exploit It

Breaking WebAuthn, FIDO2, and Forging Passkeys