Introducing SO:Brief, our new series delivering quick insights from SpecterOps experts. 🎥 First up: @MGrafnetter breaks down what passkey phishing can actually look like. Watch the brief, then go deeper in tomorrow’s webinar 👉 ghst.ly/4hDFeUS

Sep 22, 2026 · 4:59 PM UTC

1
8
1,445
Sort replies: Relevant Recent Liked
Replying to @SpecterOps @MGrafnetter
The crypto is fine. What still pays is the step that asks a human to trust chrome — enrollment, assertion prompt, or recovery — once RP ID is the only hard gate. Report the ceremony failure, not "passkeys phishable."
38