Latest / ShadowTalk: Powered by ReliaQuest
Device Code, OAuth, PhaaS: How Session Token Theft is Breaking the Phishing Playbook
Your user clicked a link, landed on a real Microsoft login page, typed their password, completed MFA, and walked away thinking nothing happened. Somewhere across the internet, an attacker's device just received an authenticated session token. The password is irrelevant. The MFA prompt already fired and passed. With PhaaS platforms now converging on token-theft tradecraft and post-compromise automation executing in seconds, defenders are racing a scripted attacker with a manual playbook.
Join hosts Brandon and John as they discuss:
How device code phishing uses real authentication…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.