Secure Email Gateways (SEGs) are built to scan text and follow links, but what happens when the link is embedded inside an image? The explosive rise of "Quishing" (QR code phishing) has created a dangerous blind spot, allowing attackers to shift the social engineering vector from corporate workstations to unmanaged mobile devices. This technical session breaks down how these visual campaigns hijack active authentication tokens to bypass MFA entirely. We will map out a concrete strategy for tracking and invalidating stolen session tokens, proving why modern defense requires an integrated view of both endpoint and identity telemetry.

Session Presented by: