The Cookie-Bite attack is an advanced evolution of Pass-the-Cookie exploits. This tactic bypasses Multi-Factor Authentication (MFA) by leveraging stolen authentication cookies—such as Azure Entra ID’s ESTSAUTH and ESTSAUTHPERSISTENT—to impersonate users.

The post Understanding the Cookie-Bite MFA Bypass Risk appeared first on Security Boulevard.

MixMode Threat Research

Source: Security Boulevard
Source Link: https://securityboulevard.com/2025/05/understanding-the-cookie-bite-mfa-bypass-risk/?utm_source=rss&utm_medium=rss&utm_campaign=understanding-the-cookie-bite-mfa-bypass-risk