Everything Sandbox Dispatch has reported about OAuth: 3 stories, newest first. Part of our Cyber Attacks coverage.
Attackers are shifting from credential theft to stealing OAuth tokens, allowing them to bypass multi-factor authentication and maintain durable access to enterprise data.
Microsoft attributes rapid credential abuse against thousands of tenants to a China-linked group using an AI penetration framework after a supply chain breach.
A researcher found that Google developer documentation sites used an OAuth secret as a Flask session key, allowing forged cookies to trigger arbitrary code execution.