Beyond the login: Session token theft and the accounting firm

For years, accounting firms have been told that strong passwords and multifactor authentication are the foundation of cybersecurity. That advice still holds, but cybercriminals have moved on.