Stolen OAuth Tokens Outlive Password Resets: Hardening Session Material in SaaS Estates

Stolen OAuth Tokens Outlive Password Resets: Hardening Session Material in SaaS Estates When an attacker steals a password, you reset it. When an attacker steals a refresh token, a password reset does not necessarily help, and many incident responders discover this at the worst possible moment. Session material has become the preferred credential...