
📔 Michael Grafnetter
@MGrafnetter • 4,043 subscribers
Principal Security Researcher @SpecterOps, Microsoft MVP Identity & Access + Enterprise & Platform Security
Videos

CVE-2026-34348 exploitation demo from my #BHUSA "Pass-the-Passkey Family of Attacks" talk: WebAuthn assertion from recent YubiKey authentication is extracted from Windows Event Log and replayed against Microsoft Entra ID using Passkey Injector. Whitepaper:
📔 Michael Grafnetter123,481 views • 1 month ago
No more content to load