Token Theft: Hip Kids Are Doing It. Now What Are We Going to Do About It?
summary
Covers how malware steals authentication tokens (token theft) to bypass controls like MFA and access rules, shows contemporary attack methods used by sophisticated attackers, and describes Microsoft’s defensive approaches and technologies for hardening systems against token-theft attacks.
AI-written summary · about
chapters (11)
- 0:00Start
- 0:37Token Theft
- 6:05Simple Credential Theft
- 13:32Demonstrated Proof of Possession
- 23:11Cobalt Fred
- 28:32Recap
- 31:00What Can We Do To Make It Harder
- 32:53Endpoint Protection
- 34:27Identity Isolation
- 45:49Continuous Access Evaluation
- 47:16There any Guidance Currently Provided on Finding Uh Stolen Access Tokens within Azure Id
related talks
33mBreaking Tokens: Modern Attacks on OAuth, OIDC, and JWT Auth Flows
31mAdvanced Persistent Teenagers: Understanding the Lapsus$ Playbook
49mThe Death of Conventional MFA: How AiTM Attacks Are Changing the Game
16mInnovation in Authentication and More
55mAzure Attacks Unpacked: Real-World Threats & Lessons
40mModern Identity Hacking: Have Hackers Really Adjusted to Constant Remote?
01h 00mDefending Against New Phishing Attacks that Abuse OAuth Authorization Flows
45mApplying Past Lessons for Intel-Driven Identity Threat Detection