March 13, 2026

Many organisations rely heavily on multi factor authentication (MFA) to protect access to systems, cloud services and sensitive data. And in most cases it works well.

But a growing number of attacks no longer try to break authentication. Instead attackers focus on stealing something even more powerful. An already authenticated session.