Hackers are exploiting OAuth loophole for persistent access - and resetting your password won't save you

Cybercriminals have increasingly used cloud account takeover (ATO) tactics in recent years - as it allows them to hijack ...

CoPhish Attack Exploits Copilot Studio Agents to Steal Microsoft OAuth Tokens

A newly identified phishing technique known as “CoPhish” exploits Microsoft Copilot Studio agents to deliver deceptive OAuth ...

Find hidden malicious OAuth apps in Microsoft 365 using Cazadora

Malicious OAuth apps can hide inside Microsoft 365 tenants. Huntress Labs' Cazadora script helps uncover rogue apps before ...
Hosted on MSN

How Linear Can Build a Safer OAuth App Ecosystem (Lessons from Launching Linear Top Issue)

What would it take for users to trust OAuth apps with their Linear workspace? After launching Linear Top Issue, I learned the hard way and here's how Linear can solve it. Earlier this month, I ...
Ars Technica

Startup necromancy: Dead Google Apps domains can be compromised by new owners

Lots of startups use Google's productivity suite, known as Workspace, to handle email, documents, and other back-office matters. Relatedly, lots of business-minded webapps use Google's OAuth, i.e.