Pass the Passkey Attack Bypasses Entra ID MFA Using a Windows Log

Someone could sign in as a company&rsquo;s top admin by reading one Windows log file. The admin&rsquo;s password and passkey were never touched. Microsoft called it medium severity and paid the finder 1,000 dollars. 🧐 Passkeys were supposed to make this impossible. Instead of a password you type, your device holds a secret key and proves who you are with it. The key is never typed and never sent…