GLOSSARY

Token / Session Theft

Attack where adversary steals an active OAuth access token, refresh token, or session cookie and replays it from their own machine, bypassing MFA entirely.

← Back to glossary