Latest / Cybersecurity Under Pressure. Real Attacks, Real Lessons
AiTM Phishing: Why MFA Does Not Prevent Session Theft
Adversary-in-the-Middle phishing can steal session tokens even after a user completes MFA. Explore the attack mechanism, session binding and revocation decisions in banking and insurance environments. The episode examines how authentication and incident response must account for an already established session.
Related CUP episodes:
OT Session Theft: When a Token Bypasses the Jump Host
OT Session Hijacking: Revoking Trusted Engineering Access
OT Remote Access: Securing the Path to Physical Control
Oldsmar Incident: When Maintenance Access Becomes the Attack Path
OT Remote Access: Closing the…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.