JA
English
Deutsch
Español
Français
Italiano
Português
Nederlands
Polski
Bahasa Indonesia
Русский
Українська
العربية
עברית
한국어Token theft
Concept
Token theft is an attack in which an adversary steals and replays a user's session or access token, for example after adversary-in-the-middle phishing, to act as the user without needing the password or passing MFA again.
| Type | Concept |
|---|---|
| Documentation | learn.microsoft.com/security/operations/token-theft-playbook |
Articles about Token theft (9)
- SAML と OpenID Connect の比較: Microsoft Entra ID に適したプロトコルの選び方
· Mirko Peters
Microsoft Entra ID における SAML と OpenID Connect（OIDC）プロトコルを比較します。主な技術的な違い、ユースケース、それぞれを選ぶべき場合について解説します。 - SAML vs OpenID Connect: Choosing the Right Protocol for Microsoft Entra ID
· Mirko Peters
Compare SAML and OpenID Connect (OIDC) protocols in Microsoft Entra ID. Learn the key technical differences, use cases, and when to choose each standard. - Uncovering Hidden Microsoft 365 and Azure Cloud Security Risks
· Mirko Peters
Managing a cloud environment can often feel like a juggling act. While your day-to-day operations demand your full attention—handling support tickets, deployi… - Striving for Balance: Security vs. Usability in Microsoft 365
· Mirko Peters
Welcome back to the podcast companion blog! In this post, we are diving deep into the intricate dynamics of Microsoft 365 security, specifically focusing on the ong… - Beyond the Prompt: Why MFA Isn't Enough to Protect Your Data
· Mirko Peters
Welcome back, security enthusiasts! If you are anything like me, you probably remember the collective sigh of relief the tech community breathed when multi-factor a… - Breaking Down the M365 Attack Chain: What You Need to Know
· Mirko Peters
Welcome back to the podcast blog! If you have been following our recent audio episodes, you know we have been diving deep into cloud security, threat landscapes, an… - ADFS Federation With Entra ID Guide
· Mirko Peters
Understand AD FS federation, SSO, trust relationships, and security, then explore migration from AD FS to Microsoft Entra ID and common troubleshooting issues. - Phishing-Resistant MFA Methods: Protecting Identity in the Modern Threat Landscape
· Mirko Peters
Phishing-resistant multi-factor authentication (MFA) is quickly becoming a must-have for every organization running their business in the cloud, especially those in… - MFA Fatigue Attack Explained: How Repeated Prompts Put Microsoft 365 and Azure Security at Risk
· Mirko Peters
In today’s Microsoft-centric workplaces, multi-factor authentication (MFA) is supposed to be your front door lock—making sure cybercriminals can’t…
Community wiki
Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.
Experts and companies for this topic
Nobody has listed this topic yet. Add it to your profile.
Sources
- Documentation: learn.microsoft.com/security/operations/token-theft-playbook
- Feed for this topic (RSS): entity/token-theft/feed.xml
- Articles on this topic: 9
Maintained by Mirko Peters (Microsoft MVP) · Last updated: