Windows Hello keys can be abused from signed-in Windows sessions to gain Entra ID access without extracting TPM-backed ...