Ran Geva urges continuous post‑auth verification
- Security practitioner Ran Geva pushed for continuous verification beyond MFA/SSO, highlighting post‑auth session risks and the need for monitoring tools. - He suggested using session‑monitoring and intent‑checking tools (example: Lunar) to detect post‑auth compromise and risky sessions. - The thread stresses that identity security must include real‑time session controls and anomaly detection, not just initial authentication (x.com/rangeva/status/2050802576849821922)