Security Researchers: Passkey Phishing Attacks Are Leading to Cloud Account Takeovers

In an active social engineering campaign, cyber attackers are impersonating IT help desks and using fake passkey setup requests to compromise employee identities and gain access to enterprise cloud data.