How Security Teams Are Using Adversary-in-the-Middle Attacks to Test Phishing Defenses

Cybersecurity Business with Fexingo: Security Companies, Breaches, and Enterprise Defense · Jun 22, 2026 · 9m · transcript

In Episode 67 of Cybersecurity Business with Fexingo, Lucas and Luna dive into how security teams are using adversary-in-the-middle (AiTM) attack simulations to test their phishing defenses. Lucas explains that AiTM attacks bypass multi-factor authentication by proxying credentials and session cookies in real time, and how tools like EvilGinx and Modlishka have made this technique accessible to both attackers and defenders. They discuss why traditional phishing simulations that only test credential entry miss the most dangerous modern threat, and how companies like a mid-sized healthcare firm…