The Dangers of Transition Mode

This report describes a wireless assessment finding where WPA3 'transition mode' simultaneously advertises WPA2, enabling capture of WPA2 handshakes that can be brute-forced offline to recover pre-shared keys; the issue was reproduced across multiple AP vendors and mitigations include disabling transition mode or enforcing strong, rotated PSKs.