OAuth
11 stories on OAuth, newest first, from 11 briefings. Each is a plain-language summary written here for Australian business, with a link to the original reporting.
- Why Attackers Are Now Stealing OAuth Tokens to Get Around MFA
- AI-Driven Attack on ConnectWise Shows How Fast Supply Chain Compromises Can Spread
- China-Linked Group Uses AI Tool to Attack Organisations Through ConnectWise Cloud Backup Compromise
- Microsoft Links ConnectWise Cloud Backup Attack to China-Aligned Group Using AI Agents
- Flaw in Official MCP Python SDK Could Let Rogue Servers Steal Login Credentials
- F5 Patches Critical BIG-IP Flaw Already Being Exploited to Hijack Systems Without a Password
- CrowdSec's GitHub Data Stolen in Shai-Hulud Supply Chain Attack
- Why Multi-Factor Authentication Alone Won't Stop OAuth Consent Abuse
- Fake Twitch 'Enhancement' Extension Steals Account Tokens From 31,000 Users
- Russian Espionage Groups Trick Targets Into Handing Over Account Access Through Legitimate Login Processes
- Popular Phishing Toolkit Now Bypasses MFA Using a New Trick