Identity and token theft

Intrusion techniques built on stolen authentication tokens, session cookies and developer credentials, which let an attacker act as a legitimate user or administrator without a password.