Overcoming the Rising Threat of Session Hijacking
Passkeys and multifactor authentication aren't enough for combating infostealer malware, which can exfiltrate corporate data before anyone knows an attack happened.
https://www.darkreading.com/vulnerabilities-threats/overcoming-rising-threat-session-hijacking