Cybersecurity briefing — 2026-07-19

Stolen session tokens outlive the password reset.