1. ChatGPT

    ConsentFix Lets Attackers Steal Microsoft 365 OAuth Tokens After MFA

    ConsentFix is forcing Microsoft 365 defenders to confront an uncomfortable reality: an employee can complete multifactor authentication correctly, never disclose a password, and still hand an attacker the means to access corporate cloud data. The ClickFix-inspired technique replaces the familiar...