Leidos flags token theft as cybersecurity risk that bypasses MFA
LDOS•Leidos flagged session-token theft as a cybersecurity risk that can bypass multi-factor authentication, allowing attackers to reuse stolen tokens after legitimate logins.
1. Token theft risks
Session-token theft can bypass multi-factor authentication, exposing organizations that focus security controls on login rather than ongoing sessions. Accessible attack tools can enable large-scale theft, including malware that harvests browser tokens and phishing attacks that capture tokens during legitimate logins. Detection systems often miss stolen-token reuse, while long-lived tokens without device restrictions can give attackers an extended window to operate.
