oauth abuse

  1. New Microsoft 365 Phishing Attacks Bypass 2FA via OAuth Abuse in 2025

    A rapidly escalating security threat has emerged for organizations relying on Microsoft 365, as hackers have devised sophisticated phishing campaigns that can bypass even two-factor authentication (2FA) protections. Since the beginning of 2025, attackers have compromised nearly 3,000 accounts...
  2. Microsoft 365 Users Targeted by Advanced Business Email Compromise (BEC) Attacks

    In recent weeks, Microsoft 365 users have found themselves in the crosshairs of a sophisticated business email compromise (BEC) campaign that exploits the cloud service’s very reputation for trust and reliability. Rather than launching the usual barrage of phishing emails filled with tyrannical...
  3. Rising Threat of OAuth Abuse: Cybercriminals Target Microsoft 365 and GitHub

    A fresh wave of OAuth abuse is making headlines, as cybercriminals continue to exploit trusted service brands like Microsoft 365 and GitHub for their nefarious purposes. Recently reported campaigns reveal the evolving tactics of threat actors, who are using sophisticated social engineering...