OAuth redirection abuse
Most security professionals know OAuth as the protocol behind “Sign in with Microsoft” and similar experiences. Fewer people realize that the same functionality can be abused to redirect victims fr...
Search for Microsoft security blog posts written and shared by the community. Discover insights on Azure, Defender, Entra, Intune, Sentinel, and more.