"Phishing-Resistant" MFA Just Got Bypassed at Black Hat — the Problem Is the Credential, Not the Factor

"Phishing-Resistant" MFA Just Got Bypassed at Black Hat — the Problem Is the Credential, Not the Factor

Week of 24 August 2026 | Compiled by Team Paringa

Passkey adoption crossed five billion users this year and 68% of enterprises are actively deploying FIDO2 architectures — yet the last fortnight produced two separate demonstrations that the credential itself, however cryptographically strong, remains the thing attackers go after.

What Happened This Week

🔴 SpecterOps demonstrates "Pass-the-Passkey" attack chain that satisfies phishing-resistant MFA

At Black Hat USA on 5 August 2026, researchers from SpecterOps presented "Pass-the-Passkey" — an attack chain that impersonates privileged users while technically satisfying phishing-resistant multi-factor authentication requirements. The research lands as a direct challenge to the assumption that FIDO2/WebAuthn-based passkeys close the authentication risk down to zero: the cryptographic binding to origin domain is sound, but the surrounding session and privilege-escalation machinery around the credential is not.

This matters because compliance frameworks (including NIS2's Article 21, which the NIS Cooperation Group formally mapped to access control and authentication in June 2026) are increasingly treating "phishing-resistant MFA" as a checkbox that satisfies regulatory obligation. The SpecterOps research shows that checkbox can be ticked and an environment still compromised — because the attack targets what happens after authentication succeeds, not the authentication event itself.

The structural issue: any architecture that issues a credential — password, certificate, or passkey — creates something that can be extracted, replayed, or abused downstream once a session is established. The fix under active discussion in the identity community is removing the credential from the equation entirely rather than making it progressively harder to steal.

Sources: ComplianceHub.Wiki

This is the gap every "we've deployed passkeys, we're covered" conversation needs to confront. Passkeys solve credential phishing; they don't solve session and privilege abuse once authentication completes. Position any identity conversation around what happens after login succeeds, not just how the login happens — that's where credential-free approaches, where there's no issued secret to steal or replay in the first place, structurally close the gap that passkey-based MFA leaves open.

🔴 Single AiTM campaign compromised 35,000+ users across 13,000 organisations in three days — all running MFA

An adversary-in-the-middle campaign in April 2026 compromised more than 35,000 users across 13,000 organisations in 26 countries inside three days. Every victim was using MFA. AiTM works by proxying the real authentication flow — the victim genuinely authenticates against the legitimate service, and the attacker's proxy simply captures the session token issued afterward, sidestepping the MFA check entirely rather than breaking it.

Obsidian Security's incident response data shows MFA failed to prevent compromise in 84% of the cases it investigated. Commercial phishing-as-a-service kits — EvilProxy, Tycoon 2FA, BlackForce — now offer real-time MFA bypass as a standard, rentable feature. Microsoft, Europol and partners dismantled the Tycoon 2FA network in early 2026, but comparable platforms filled the gap within weeks.

Sources: Cyberpress, DEV Community

An 84% MFA failure rate in real incident response should end any conversation that treats "we have MFA" as a finished sentence. Microsoft Entra and Okta deployments are exactly the architecture AiTM was built to beat — they still issue a session token an attacker can steal. The only categorically different answer is authentication that never issues a credential or reusable token for a proxy to intercept in the first place.

What Identity and Security Leaders Are Dealing With

The industry narrative through 2025 was "get to passkeys and you're safe." 2026's evidence is dismantling that: passkeys close the credential-phishing vector but leave session theft and post-authentication privilege abuse fully open, and AiTM has scaled into a rentable commodity attack that specifically targets the token, not the factor. Meanwhile NIS2 is turning authentication architecture into a board-level liability question across 29,000+ EU entities, which means the "we're compliant" conversation is shifting from "did you deploy MFA" to "can your architecture actually be phished."

Three Things Worth Watching Next Week

1. Follow-on Pass-the-Passkey disclosures - expect other researchers to publish variants now that SpecterOps has shown the technique is viable against major IdPs.

2. NIS2 audit activity - Netherlands' Cyberbeveiligingswet entered force 15 August; watch for the first enforcement actions tied specifically to authentication controls under Article 21.

3. AiTM kit takedown follow-through - Tycoon 2FA's network was dismantled but replacement platforms filled the gap in weeks; watch which kit becomes the next commodity leader.

Questions? hello@paringa.ai

Paringa's authentication partner delivers phishing-resistant identity without ever issuing a credential to steal, replay, or proxy — closing the exact gap this week's research exposed in passkey and passwordless deployments. | 24 August 2026 | © Paringa Ltd