A newly identified Microsoft OAuth phishing campaign is changing the rules of phishing by eliminating one … Microsoft OAuth Phishing Campaign Uses Real Login Pages to Hijack AccountsRead more
oauth abuse
Microsoft 365 Mailbox Rules Abused in Email Attacks
Cybercriminals are increasingly abusing Microsoft 365 mailbox rules as a stealth persistence mechanism to silently monitor, … Microsoft 365 Mailbox Rules Abused in Email AttacksRead more
Critical Microsoft 365 Email Hijack Attack Exposed
Corporate email remains one of the most targeted attack surfaces in modern cybersecurity—and attackers are increasingly … Critical Microsoft 365 Email Hijack Attack ExposedRead more
OAuth Attacks in Entra ID Can Leverage ChatGPT to Compromise Email
Threat actors are constantly adapting, and one increasingly abused technique inside Microsoft Entra ID is OAuth … OAuth Attacks in Entra ID Can Leverage ChatGPT to Compromise EmailRead more
When MFA Is Abused: OAuth Device Phishing Explained
Modern phishing attacks no longer need stolen passwords—or even multifactor authentication (MFA) bypasses—to succeed. Instead, attackers … When MFA Is Abused: OAuth Device Phishing ExplainedRead more