Attack on Token: Why post-auth attacks are the next frontier

According to Microsoft 99% of identity attacks in Entra ID are still passwords attacks, but with about 39.000 token theft attempts per day it’s clear that attackers adapt to more secure authentication methods like MFA, Passkeys or certificate based authentication. If you want to know how such attacks can unfold, which methods attackers use and how to protect your users, you came to the right session. As always there is not THE one solution, but we already have a lot of tools available to us defenders and correctly deployed we can mitigate these attacks.