Tag

#OAuth

2 results in the archive.

Threat Actor Jul 14, 2026

ShinyHunters abuses OAuth in SaaS apps: Microsoft issues alert

Microsoft Threat Intelligence uncovered ShinyHunters abusing OAuth in SaaS applications through vishing, supply chain attacks, and guest access misconfigurations, exposing new SaaS security risks.

#OAuth #SaaS Security #ShinyHunters

Read analysis

Threat Actor Jul 10, 2026

Attackers Use Dormant GitHub Accounts to Map Corporate Orgs

Datadog Security Labs warns of campaigns using dormant GitHub accounts and compromised OAuth tokens to scrape corporate GitHub organizations and user data through the GitHub API. Attackers automate scraping with custom or legitimate-sounding user agents to blend in and avoid detection.

#Cybersecurity #GitHub #OAuth

Read analysis