Cyber CrimeHotel Wi-Fi DNS Hijacks Target M365
Researchers report that compromised hotel network gateways are redirecting business travelers to sophisticated phishing portals.
> Search
9 results for “oauth”
Cyber Crime
SecurityHow Microsoft is Tightening OAuth Defenses Against ShinyHunters
Microsoft is rolling out enhanced security measures in Defender for Cloud Apps to combat the abuse of OAuth tokens by the ShinyHunters group.
SecurityRabbitMQ Flaws Open Broker Hijack Paths
Critical access control vulnerabilities in RabbitMQ could allow attackers to bypass tenant boundaries and exfiltrate OAuth secrets.
SecurityPhishing Kits Adapt to Bypass MFA Flows
Researchers identify Jalisco and OmegaLord as new threats targeting Microsoft 365 through advanced credential and device exploitation.
SecurityThe Silent OAuth Exploit Bypassing Cloud Identity Defenses
Threat actors are weaponizing OAuth client ID spoofing to validate stolen credentials while remaining invisible to standard telemetry.
SecurityBeyond Credentials: The Year Salesforce Was Used Against Itself
Microsoft details how threat actors bypassed traditional defenses to compromise Salesforce environments via OAuth and guest access.
SecurityCloud Authentication Under Siege: The Rise of OAuth ID Spoofing
A stealthy new attack technique is bypassing traditional security logs, allowing threat actors to compromise cloud-based infrastructure.
SecurityRabbitMQ Vulnerabilities Expose Infrastructure to Total Takeover
Critical flaws in RabbitMQ allow unauthenticated access to OAuth secrets and authorization bypasses, threatening enterprise messaging.
Cyber CrimeA Misconfigured Server Unlocks Three-Actor Phishing Ecosystem
A single exposed directory reveals how multiple threat actors leverage AiTM tools and OAuth abuse to compromise corporate accounts.