Device Code, OAuth, PhaaS: How Session Token Theft is Breaking the Phishing Playbook
About this episode
The episode discusses how session token theft is undermining traditional phishing defenses.
Your user clicked a link, landed on a real Microsoft login page, typed their password, completed MFA, and walked away thinking nothing happened. Somewhere across the internet, an attacker's device just received an authenticated session token. The password is irrelevant. The MFA prompt already fired and passed. With PhaaS platforms now converging on token-theft tradecraft and post-compromise automation executing in seconds, defenders are racing a scripted attacker with a manual playbook. Join ...
More episodes of ShadowTalk: Powered by ReliaQuest
- SonicWall, MFA Bypass, IABs: Why Patched Devices Are Still Handing Attackers Initial Access
- SQLite, Mistral, OpenAI: How AI Attacks Are Reshaping the Attack Surface
- Canvas, Trellix, Mini Shai-Hulud: How Defenders Respond When Supply Chain Attacks Become Weekly
Explore listener stats, chart rankings, contacts and more on the ShadowTalk: Powered by ReliaQuest podcast page.