Microsoft’s cloud services ecosystem—encompassing Microsoft Teams, Outlook, OneDrive, and broader Office 365 environments—has become a double-edged sword, offering organizations unparalleled productivity while simultaneously attracting sophisticated cyber adversaries. In recent months, a series...
There’s a certain poetic irony in the fact that OAuth 2.0—a framework specifically engineered to keep our digital lives safe from password theft—is now being bent and twisted by Russian hackers to hijack entire Microsoft 365 accounts. If that isn’t progress in the field of offensive...
They say trust is the cornerstone of any relationship—especially if that relationship is between you, the internet, and a determined Russian adversary with a penchant for phishy invitations and suspicious requests for OAuth codes.
Phishing in the OAuth Era: New Tricks for Old Hackers
When we...