CISA and NIST released a report on token security, recommending OpenID Foundation specifications for protecting against token forgery and misuse. Implementers can use the Shared Signals Framework and Continuous Access Evaluation Profile to ensure secure identity infrastructure.