Why FIDO2 and Passkeys are the New MFA Standard for Microsoft 365
Attackers no longer need a password to take over a Microsoft 365 account. They just need a session token, and they are getting it after users complete a successful MFA prompt. This is the reality of...