All IT admins and system owners should take note of this MFA bypass attack. Oasis discovered it and here is an easy read by Alessandro Mascallino at Information Security Magazine. Not sure how CMMC assesors should consider this. One the one hand passkeys are more secure, yet the letter of the law calls for MFA. Many questions here about the speed and flexibility of the CMMC framework to be responsive to change. Sadly passkeys are still in early adoption. #CW #CMMC #cybersecurity #NIST #ceomindset