Threat actors downgrade FIDO2 MFA auth in PoisonSeed phishing attack
From BleepingComputer to All on Sat Jul 19 14:18:37 2025
A PoisonSeed phishing campaign is bypassing FIDO2 security key protections by abusing the cross-device sign-in feature in WebAuthn to trick users into approving login authentication requests from fake company portals. [...]