🎯 Token theft

The items that name it 4

• NIST IR 8587: Protecting Tokens and Assertions from Forgery, Theft, and Misuse
  paper2026-09-14
• Orca Security: ITDR for the Cloud
  article2026-07-03
• elementalsouls/Claude-BugHunter
  repo2026-05-22

  credential/session theft technique; mentioned as out of scope for this bundle

• 6 Months of Researching OAuth Application Attacks | Huntress
  writeup2025-02-10

  Initial access technique targeted by Huntress Unwanted Access capability