Don’t miss the next episode!
Register Now!
When MFA isn't enough: OAuth abuse and token theft
Password theft is no longer required for many modern attacks. MFA can protect the login, attackers target what comes afterward: Trusted applications, OAuth permissions, session tokens, and established cloud access.
In this session, we break down how OAuth abuse and token theft work, why these techniques are difficult to detect, and how organizations can better protect cloud identities.
Gain practical guidance for reducing identity risk without relying solely on passwords or MFA, across:
- OAuth permissions
- Token and session controls
- Anomalous cloud access identification
- Malicious application consent
Gain insight into attacker tactics and decisions, paired with a step-by-step attack breakdown and the steps to mitigate such risks. Find the list below, or learn more about each episode and register here.
The Attack breakdown: How modern cyberattacks really work series continues—join us live!
