Desk · Identity and access

Identity

Coverage of IAM, authentication, privilege abuse, and account takeover risk.

Articles: 1
Topics: 1

The 28-Hour Revocation Gap: Why Entra ID Continuous Access Evaluation (CAE) Fails Against Session Token Theft

Entra ID Continuous Access Evaluation (CAE) tokens last up to 28 hours, and only ~4.5% of Microsoft services support it. Here is how AiTM attackers exploit the gap.

Sep 19 · 9 min