Bezalu
All newsletters

May 2026: Session Cookie Hijacking and Why MFA Isn't the Finish Line

MFA is a strong front-door lock, but it isn’t the finish line. This issue explains session cookie hijacking — where attackers steal the token that keeps you logged in and replay your already-authenticated session, skipping the MFA prompt entirely. We cover how adversary-in-the-middle phishing and endpoint cookie theft happen, and the layered controls that shrink the window. These are core themes in our cybersecurity work.

We also dig into the “backup exit” strategy: can you actually move your business data off a SaaS platform without the vendor’s help? Proprietary lock-in quietly raises costs and turns every renewal into a forced decision — a risk our business continuity planning is designed to reduce.

Plus: a five-minute security check for browser extensions, a “legacy debt” audit to find your oldest risks first, a modern clean-desk baseline for home offices, and red flags for fake recruitment scams. Not sure where your gaps are? Build your IT plan.

In this issue

  • The 'session cookie' hijack: why MFA can't always save you
  • The 'backup exit' strategy: can you move your data without the vendor?
  • Micro-SaaS vetting: a 5-minute security check for browser add-ons
  • The 'legacy debt' audit: the oldest risks to find first
  • 'Clean desk' 2.0: home office security defaults that prevent incidents
  • Quick red flags for fake recruitment scams

Read the full newsletter

Your browser can't display the embedded PDF.

Download the PDF instead