New

Session Hijacking, Phishing, And Sso Abuse Explained

See how Huntress ITDR stops session and token theft like this: https://www.huntress.com/platform/managed-itdr-lp?utm_source=youtube&utm_medium=social&utm_campaign=cy26-10-camp-brand-global-broad-all-x-x-d_speed-black_hat_talk&hnt=kjjyirxk6thb

Recorded live at Black Hat USA 2026, Huntress Principal Product Researcher Jenko Hwong breaks down how OAuth consent screens, device code phishing, and SSO let attackers steal a session and skip MFA entirely.

0:00 - Phishing before OAuth
2:05 - How OAuth consent actually works
3:36 - How attackers abuse the OAuth consent screen
6:01 - Device code phishing and why it tricks everyone
7:49 - Watching a real device code phishing attack
17:29 - Why MFA won't stop session hijacking
20:00 - The cookie stealing problem we never fixed

———
We wreck hackers. A purpose-built platform for organizations like yours, all backed and operated by our industry-proven, 24/7 AI-Centric SOC for continuous threat protection.

We are enterprise-grade cybersecurity for ALL businesses.

Learn more about how Huntress fights cyber threats:
https://www.huntress.com/why-huntress?utm_source=youtube&utm_medium=social&utm_campaign=cy26-09-camp-multi-global-broad-all-x-x-x&hnt=bf48o4ryqjbl

credit: