Downgrade Attack Allows Phishing Kits to Bypass FIDO

You probably can't break FIDO authentication. Still, researchers have shown that there are ways to get around it.