- Why MFA is getting easer to bypass and what to do about it Ars Technica
- ‘SessionShark’ ToolKit Evades Microsoft Office 365 MFA Dark Reading
- Do Not Use This Login On Your PC—You Lose Everything Forbes
- Cookie-Bite attack PoC uses Chrome extension to steal session tokens BleepingComputer
- Researchers Find Way to Bypass Phishing-Resistant MFA in Microsoft Entra ID CybersecurityNews