Session Abstract

Passkeys are steadily replacing passwords, and as adoption grows, attackers and researchers are turning their attention to new ways of abusing them. Recent work has surfaced a range of techniques — FIDO downgrade attacks, Windows Hello key abuse, and passkey replay among them — that get around phishing-resistant authentication without ever breaking the underlying cryptography. This session walks through the latest community research into complex passkey attacks, breaking each one down to understand how it works, how much real-world risk it carries, and what it takes to pull off. From there we map the defenses: the concrete preventive controls and detections that address each technique, and how we can implement them with the Microsoft security stack. You'll leave with a clear picture of the passkey threat landscape and a practical sense of which controls matter most for your environment.

Robbe Van den Daele

I'm Robbe, an information security professional driven by a genuine passion for my work. My focus lies in Cloud Security, Purple Teaming, Microsoft Security Solutions, and the powerful MITRE ATT&CK framework. With a strong foundation in computer science, I've delved into the intricacies of information security, mastering technical aspects and procedural complexities. Cloud security became my niche, where I secure data, design resilient architectures, and implement robust measures. As a purple teamer, I excel at detecting and mitigating cybersecurity threats, identifying vulnerabilities, and fortifying defenses. I've embraced the invaluable MITRE ATT&CK framework, consulting organizations on understanding adversaries and strengthening their security posture. I'm driven by a thirst for knowledge, constantly staying ahead of industry trends through engagement with information security communities, conferences, and continuous learning.