Glossary: Attacks and Indicators

token theft

Stealing a session cookie or token and replaying it to skip login and MFA. It is now the most common way around MFA.