#oauth

#oauth

Hackers gained access to Microsoft's network and monitored top executives' emails by exploiting an aging test account with administrative privileges.

The hackers used the OAuth authorization protocol to create a malicious app and gain persistent access to privileged email accounts. [ more ]

Microsoft has revealed details of how the Russian state-sponsored hacking group, Nobelium, gained access to its corporate systems.

The hackers initially used a password spray attack and targeted a non-production test tenant account that did not have two-factor authentication enabled.

Nobelium used their initial access to compromise a legacy test OAuth application, which allowed them to create malicious OAuth applications and access Microsoft's corporate environment. [ more ]

Miscreants are misusing OAuth for financially motivated cyber crimes such as phishing and crypto mining.

Microsoft warns that compromised accounts without strong authentication are particularly vulnerable to OAuth abuse. [ more ]