Browsing Tag
OAuth
4 posts
Malware Leveraging Google Cookie Exploit via OAuth2 Functionality
Among others, developers of the infamous Lumma, an infostealer malware, are already using the exploit by employing advanced…
Microsoft: Storm-1283 Sent 927,000 Phishing Emails with Malicious OAuth Apps
Cloud Security Shakeup: Experts Urge Caution as OAuth Becomes Hacker Playground.
Social Login Flaws in Popular Websites Risked Billions of User Accounts
The critical API security flaws in the social sign-in and OAuth (Open Authentication) implementations affected high-profile companies like…
New Spam Attack Abusing OAuth Apps to Target Microsoft Exchange Servers
According to Microsoft 365 Defender Research Team, in an incident they analyzed, malicious OAuth applications were deployed on compromised cloud tenants, and eventually, attackers took over Exchange servers to carry out spam campaigns.