Search: “Microsoft OAuth”

38 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 68 Threat actor 59 Phishing & fraud 51 Malware 44 Data breach 38 Exploit / PoC 34 Ransomware 30 Tools 7 Policy & legal 7 Industry 6 AI tools & infra 6 AI safety & security 5 Advisory 1 Research 1

SeverityAll critical 131 high 93 medium 99 low 20 info 17

Fake OAuth client IDs are helping attackers slip past sign-in logs

Help Net SecurityJul 13, 00:00 UTC · Jul 13, 2026Data breach

45

Microsoft says Russian hackers used previously identified tactic to breach senior exec emails

The RecordJan 26, 17:14 UTC · Jan 26, 2024Data breach1

57

Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2026Data breach

45

How to Investigate an OAuth Grant for Suspicious Activity or Overly Permissive Scopes

The Hacker NewsAug 21, 11:12 UTC · Aug 21, 2023Data breach

60

Midnight Blizzard and Cloudflare-Atlassian Cybersecurity Incidents: What to Know

The Hacker NewsMay 2, 03:42 UTC · May 2, 2024Data breach

60

OAuth, guest accounts, and weak MFA drive SaaS risk

Help Net SecurityJul 6, 00:00 UTC · Jul 6, 2026Data breach

60

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts

The Hacker NewsJul 21, 04:58 UTC · Jul 21, 2026Data breach1

45

Outlook Hack: Microsoft Reveals How a Crash Dump Led to a Major Security Breach

The Hacker NewsSep 8, 05:00 UTC · Sep 8, 2023Data breach

60

Week in review: Acrobat Reader flaw exploited, Claude Mythos offensive capabilities and limits

Help Net SecurityApr 19, 00:00 UTC · Apr 19, 2026Data breach in the wildCVE-2026-34621 CVE-2026-39813 CVE-2026-39808

60

Microsoft Expands Cloud Logging to Counter Rising Nation

The Hacker NewsJul 20, 05:24 UTC · Jul 20, 2023Data breach1

57

Think Your IdP or CASB Covers Shadow IT? These 5 Risks Prove Otherwise

The Hacker NewsJun 9, 11:00 UTC · Jun 9, 2025Data breach

60

What is Nudge Security and How Does it Work?

The Hacker NewsDec 12, 05:43 UTC · Dec 12, 2024Data breach

60

Beware the man in the cloud: How to protect against a new breed of cyberattack

Help Net SecurityJan 21, 00:00 UTC · Jan 21, 2019Data breach

57

The $10 Cyber Threat Responsible for the Biggest Breaches of 2024

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2025Data breach1

60

GitHub Says Hackers Breached Dozens of Organizations Using Stolen OAuth Access Tokens

The Hacker NewsMay 28, 08:22 UTC · May 28, 2022Data breach

45

GitHub Notifies Victims Whose Private Data Was Accessed Using OAuth Tokens

The Hacker NewsMay 28, 08:20 UTC · May 28, 2022Data breach

45

China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access

The Hacker NewsMar 7, 04:04 UTC · Mar 7, 2025Data breach in the wildCVE-2025-0282 CVE-2024-3400 CVE-2023-3519+5 CVEs

60

Week in review: Rail transport cybersecurity, “verified” OAuth apps used to infiltrate organizations

Help Net SecurityFeb 5, 00:00 UTC · Feb 5, 2023Data breach CVE-2022-27596 CVE-2023-20076 CVE-2023-225011

60

Into the Breach: Breaking Down 3 SaaS App Cyber Attacks in 2022

The Hacker NewsApr 7, 13:00 UTC · Apr 7, 2022Data breach

60

Uncovering (and Understanding) the Hidden Risks of SaaS Apps

The Hacker NewsApr 19, 15:25 UTC · Apr 19, 2023Data breach

57

Vercel Breach Tied to Context AI Hack Exposes Limited Customer Credentials

The Hacker NewsApr 22, 15:14 UTC · Apr 22, 2026Data breach1

57

Microsoft experts disrupted a large

Security AffairsJun 14, 21:02 UTC · Jun 14, 2021Data breach2

45

Week in review: Accenture data breach, great open-source cybersecurity tools

Help Net SecurityJul 12, 00:00 UTC · Jul 12, 2026Data breach in the wildCVE-2026-48282 CVE-2026-55255 CVE-2026-506561

60

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation

The Hacker NewsJul 30, 07:40 UTC · Jul 30, 2026Data breach CVE-2026-42897 CVE-2025-66376

60

Product showcase: Nudge Security’s SaaS security and governance platform

Help Net SecurityMar 11, 13:18 UTC · Mar 11, 2024Data breach

60

Human Error the Leading Cause of Cloud Data Breaches

Infosecurity MagazineJul 6, 11:30 UTC · Jul 6, 2023Data breach

60

⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water

The Hacker NewsAug 3, 14:03 UTC · Aug 3, 2026Data breach CVE-2026-42897 CVE-2026-66066

60

ThreatsDay Bulletin: WhatsApp Hijacks, MCP Leaks, AI Recon, React2Shell Exploit and 15 More Stories

The Hacker NewsDec 25, 13:23 UTC · Dec 25, 2025Data breach

45

Active Directory Under Siege: Why Critical Infrastructure Needs Stronger Security

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2025Data breach

60

New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2026Data breach CVE-2025-327112

60

Mailbox Rule Abuse Emerges as Stealthy Post

Infosecurity MagazineApr 13, 15:00 UTC · Apr 13, 2026Data breach

57

Why High Tech Companies Struggle with SaaS Security

The Hacker NewsMay 15, 00:00 UTC · May 15, 2023Data breach

60

Non-Human Access is the Path of Least Resistance: A 2023 Recap

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2023Data breach

57

Unpacking 2024's SaaS Threat Predictions

The Hacker NewsJun 5, 11:00 UTC · Jun 5, 2024Data breach1

60

Permiso State of Identity Security 2024: A Shake

The Hacker NewsOct 23, 17:09 UTC · Oct 23, 2024Data breach

57

Vercel attack fallout expands to more customers and third

CyberScoopApr 23, 22:05 UTC · Apr 23, 2026Data breach in the wild1

60

GSA watchdog to 18F: Stop using Slack

CyberScoopMay 13, 17:32 UTC · May 13, 2016Data breach in the wild

60

Week in review: Stealth-patched FortiWeb vulnerability under active exploitation, Logitech data breach

Help Net SecurityNov 23, 00:00 UTC · Nov 23, 2025Data breach in the wildCVE-2025-13223 CVE-2025-58034 CVE-2025-11001

60