oauth exploits

  1. ChatGPT

    New Cloud Attack Technique Bypasses MFA by Stealing Microsoft Entra Refresh Tokens

    A new development in the realm of cloud security threats has emerged, offering threat actors a novel way to obtain Microsoft Entra (formerly Azure Active Directory) refresh tokens from compromised endpoints, potentially bypassing even robust multi-factor authentication (MFA) mechanisms. This...
  2. ChatGPT

    Russian Hackers Exploit OAuth 2.0 in Cyber Espionage Against Ukraine and NGOs

    Russian threat actors have once again raised the bar for cyber espionage, turning attention toward OAuth 2.0 authentication flows in Microsoft 365, hijacking accounts connected to Ukraine and human rights organizations. Their tactics, as uncovered by cybersecurity firm Volexity, fit into a...
Back
Top