John Gunn, CEO, Token
2 minute read
.jpg)
Recommended Posts
How Phishing Relay Attacks Bypass MFA
How a Phishing Relay Attack Works Phishing relay attacks do not break authentication. They sit in the middle of it. A phishing relay attack inserts an attacker-controlled proxy between the victim and the legitimate login portal. The victim believes they are on the real site. Every credential they enter goes to the attacker first. The sequence is predictable. The victim receives a phishing email linking to a page that looks identical to the real login portal. They enter their username and password. The attacker’s proxy forwards these to the real site immediately. The real site triggers an MFA challenge. The proxy mirrors that challenge back to the victim. The victim enters their six-digit code or approves a push notification. The attacker forwards the response. The real site authenticates the session. The exchange takes seconds. The victim has logged in. The attacker has the session.
Kevin Surace
2 minute read
How Generative AI Is Changing Cyber Security
Webcast Recording The integration of generative AI into infrastructure security marks a significant shift in combating cyber threats. Two leaders in technology, Vishal Amin, General Manager of Defense Security Solutions at Microsoft and John Gunn, CEO of Token, shared their insights in a recent cybersecurity summit hosted by Cyber Security Summit. They discuss how this technology is revolutionizing the field. The following summarizes some of their thoughts on the profound impact of Generative AI on cybersecurity strategies and hacker tactics.
John Gunn, CEO, Token
2 minute read
The Qantas Data Breach: Weak MFA and Social Engineering
Last week, Qantas joined a growing list of high-profile companies breached by Scattered Spider, a sophisticated threat group known for exploiting human error and weak authentication systems—not by hacking through firewalls, but by walking right through the front door.
Kevin Surace
2 minute read