Enterprises find MFA blind spot — attackers exploit session tokens for lateral movement.

Context

A blind spot in MFA authentication allows attackers to move laterally through enterprise systems using stolen session tokens. This vulnerability, identified by CIO Alex Philips at NOV, highlights the need for enterprises to tighten identity policies and implement rapid token revocation. Relevant for CISOs and security teams evaluating their identity-layer governance.