Token theft
Concept
Token theft is an attack in which an adversary steals and replays a user's session or access token, for example after adversary-in-the-middle phishing, to act as the user without needing the password or passing MFA again.
| Tipo | Concept |
|---|---|
| Documentación | learn.microsoft.com/security/operations/token-theft-playbook |
Articles about Token theft (13)
- SAML frente a OpenID Connect: cómo elegir el protocolo adecuado para Microsoft Entra ID
· Mirko Peters
Compara los protocolos SAML y OpenID Connect (OIDC) en Microsoft Entra ID. Conoce las diferencias técnicas clave, los casos de uso y cuándo elegir cada estándar. - Más allá de la contraseña: por qué MFA no basta para proteger tus datos
· Mirko Peters
¡Bienvenidos de nuevo, entusiastas de la seguridad! Si eres como yo, probablemente recuerdes el suspiro de alivio colectivo que dio la comunidad tecnológica cuando la autenticación - Guía de federación de AD FS con Entra ID
· Mirko Peters
Comprende la federación de AD FS, el SSO, las relaciones de confianza y la seguridad; luego explora la migración de AD FS a Microsoft Entra ID y los problemas habituales de solució - MFA resistente al phishing: protección de la identidad en el panorama actual de amenazas
· Mirko Peters
La autenticación multifactor (MFA) resistente al phishing se está convirtiendo rápidamente en algo imprescindible para toda organización que opera en la nube, sobre todo para las q - Ataques de fatiga MFA explicados: cómo las solicitudes repetidas ponen en riesgo la seguridad de Microsoft 365 y Azure
· Mirko Peters
En los entornos de trabajo centrados en Microsoft de hoy, la autenticación multifactor (MFA) debe ser la cerradura de la puerta principal: impedir que los ciberdelincuentes entren - SAML vs OpenID Connect: Choosing the Right Protocol for Microsoft Entra ID
· Mirko Peters
Compare SAML and OpenID Connect (OIDC) protocols in Microsoft Entra ID. Learn the key technical differences, use cases, and when to choose each standard. - Uncovering Hidden Microsoft 365 and Azure Cloud Security Risks
· Mirko Peters
Managing a cloud environment can often feel like a juggling act. While your day-to-day operations demand your full attention—handling support tickets, deployi… - Striving for Balance: Security vs. Usability in Microsoft 365
· Mirko Peters
Welcome back to the podcast companion blog! In this post, we are diving deep into the intricate dynamics of Microsoft 365 security, specifically focusing on the ong… - Beyond the Prompt: Why MFA Isn't Enough to Protect Your Data
· Mirko Peters
Welcome back, security enthusiasts! If you are anything like me, you probably remember the collective sigh of relief the tech community breathed when multi-factor a… - Breaking Down the M365 Attack Chain: What You Need to Know
· Mirko Peters
Welcome back to the podcast blog! If you have been following our recent audio episodes, you know we have been diving deep into cloud security, threat landscapes, an… - ADFS Federation With Entra ID Guide
· Mirko Peters
Understand AD FS federation, SSO, trust relationships, and security, then explore migration from AD FS to Microsoft Entra ID and common troubleshooting issues. - Phishing-Resistant MFA Methods: Protecting Identity in the Modern Threat Landscape
· Mirko Peters
Phishing-resistant multi-factor authentication (MFA) is quickly becoming a must-have for every organization running their business in the cloud, especially those in… - MFA Fatigue Attack Explained: How Repeated Prompts Put Microsoft 365 and Azure Security at Risk
· Mirko Peters
In today’s Microsoft-centric workplaces, multi-factor authentication (MFA) is supposed to be your front door lock—making sure cybercriminals can’t…
Community wiki
Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.
Expertos y empresas para este tema
Nadie ha indicado aún este tema. Añádelo a tu perfil.
Sources
- Documentation: learn.microsoft.com/security/operations/token-theft-playbook
- Feed for this topic (RSS): entity/token-theft/feed.xml
- Articles on this topic: 13
Maintained by Mirko Peters (Microsoft MVP) · Last updated: