News AnalysisStanding

Entra ID passkeys and three confirmed SSO incidents

Updated 12 August 2026 · Timeframe: Current snapshot

Our data shows three confirmed identity-sso stories. All three involved authentication paths that attackers reached through phishing or credential capture. No passkey telemetry appears in the set.

Why it matters

These cases illustrate why phishing-resistant defaults matter once they are actually turned on.

What to do

• Security leaders. Turn on passkeys for Entra ID and audit existing conditional access rules that still allow weaker factors.
• Lean IT orgs. Pilot the Windows Hello and macOS PSSO changes on a small group before broad rollout.
• MSPs. Flag tenants still using only password or SMS MFA and schedule the switch.

Our take

Our own data behind a live news story, generated on tap — the depth the headline skips.