> Search

12 results for “oauth”

GhostCode Phishing Kit Bypasses MFA

A new phishing kit abuses Microsoft's device-code flow to bypass MFA and establish persistent access to Microsoft 365 environments.

A webinar will examine two attacks that used malicious OAuth apps and social engineering to breach Google Workspace environments.

A cross-store Twitch extension sent OAuth tokens for roughly 31,000 users to operator proxies, Socket reports.

Researchers report that compromised hotel network gateways are redirecting business travelers to sophisticated phishing portals.

Microsoft is rolling out enhanced security measures in Defender for Cloud Apps to combat the abuse of OAuth tokens by the ShinyHunters group.

Critical access control vulnerabilities in RabbitMQ could allow attackers to bypass tenant boundaries and exfiltrate OAuth secrets.

Researchers identify Jalisco and OmegaLord as new threats targeting Microsoft 365 through advanced credential and device exploitation.

Threat actors are weaponizing OAuth client ID spoofing to validate stolen credentials while remaining invisible to standard telemetry.

Microsoft details how threat actors bypassed traditional defenses to compromise Salesforce environments via OAuth and guest access.

A stealthy new attack technique is bypassing traditional security logs, allowing threat actors to compromise cloud-based infrastructure.

Critical flaws in RabbitMQ allow unauthenticated access to OAuth secrets and authorization bypasses, threatening enterprise messaging.

A single exposed directory reveals how multiple threat actors leverage AiTM tools and OAuth abuse to compromise corporate accounts.