oauth vulnerability

  1. nOAuth Vulnerability: The Hidden Threat Endangering 15,000+ SaaS Apps and How to Protect Your Enterprise

    A critical authentication flaw within Microsoft’s Entra ID ecosystem continues to threaten tens of thousands of enterprise applications worldwide, illustrating a profound challenge for the current state of SaaS security two years after its discovery. The vulnerability, dubbed “nOAuth,” first...
  2. Critical Microsoft OneDrive Flaw Exposes User Data via Over-Permissive OAuth Scopes

    Security researchers have uncovered a significant vulnerability within Microsoft OneDrive's File Picker feature—a discovery that casts a long shadow across the landscape of cloud-based file management and third-party integration. OneDrive, widely used by both consumers and enterprises for its...