🚨 PoisonSeed phishing kit bypasses FIDO2 by removing secure options from login flows & redirecting users to cloned Microsoft, Google, or Okta pages.

It doesn’t exploit FIDO2—it avoids it.
📌 Experts warn this is part of a broader phishing evolution using social engineering + session hijacking.
🔗 Full article:
https://www.technadu.com/seed-of-deceit-poisonseed-tricks-users-out-of-fido2-redirects-microsoft-google-and-okta-logins-to-phishing-pages/603376/

#CyberSecurity #FIDO2 #Phishing #Okta #Infosec

TIL, If you type `thisisunsafe` on a Chrome TLS/SSL error page (e.g. https://expired.badssl.com ), Chrome will bypass the error and load the page for you. This is Google Chrome's TLS/SSL bypass cheat code.

Source https://thomascountz.com/2025/07/17/chromes-ssl-bypass-cheatcode

"There's been a new breakthrough on flying cars! Soon, the-"

"It won't happen."

"This time, they fixed the-"

"Doesn't matter."

"Why not?"

"Dragons."

"What?"

"Flying cars get popular, dragons appear and eat them all, and make us forget it."

"What?"

"Happens every time."

"What?"

"Yup."

#TootFic #MicroFiction #SmallStories