Identify and Mitigate SaaS Session Hijacking

preview_player
Показать описание
Prevent attackers from capturing session tokens and establishing persistence within your SaaS environment. The prevalence of MFA and SSO has caused attackers to forgo targeting credentials in favor of capturing session tokens. In this lightboard video, Obsidian CPO and co-founder Glenn Chisholm demonstrates some of the methods bad actors are employing to steal tokens, hijack sessions, and establish persistence within SaaS identity providers and business-critical applications.
Рекомендации по теме
Комментарии
Автор

I can tell you're holding back, it's obvious you've got a firm grip on the category and the topic.
My only complaint is that the title of this video is "how to identify and mitigate" which you did not cover at all, this video explained what a season was and their relation to tokens, and basic examples of how an attacker might steal one
Can you make a follow up video for a more advanced audience with information on how to identify sessions that have compromised tokens, and detect when the token gets injected into a different browser that's granted access? 3:43

tomb