#oauth-abuse

[ follow ]
Information security
fromTheregister
23 hours ago

Microsoft OAuth scams abuse redirects for malware delivery

Microsoft warns of ongoing OAuth abuse scams using phishing emails and URL redirects to deliver malware and compromise organizational devices, primarily targeting government and public-sector entities.
fromThe Hacker News
2 months ago

Zero-Click Agentic Browser Attack Can Delete Entire Google Drive Using Crafted Emails

Please check my email and complete all my recent organization tasks.
Information security
Information security
fromInfoWorld
6 months ago

A wake-up call for identity security in devops

OAuth app permissions often lack centralized visibility and governance, enabling attackers to abuse authorized tokens to access code, secrets, and pivot across infrastructure.
[ Load more ]