illustration graphic of phishing for credentials

Device Code Phishing Explained: How Attackers Abuse OAuth Across SaaS

Device code phishing is expanding beyond Microsoft 365. Learn how attackers abuse OAuth authorization flows across SaaS platforms and what security teams can do to reduce risk. The post Device Code Phishing Explained: How Attackers Abuse OAuth Across SaaS appeared first on AppOmni ... Read More
OAuth Tokens: The Danger Behind the Commvault Breach

OAuth Tokens: The Danger Behind the Commvault Breach

Discover what went wrong in the Commvault breach: How AppOmni’s powerful SaaS security platform steps in to stop threats before they strike. The post OAuth Tokens: The Danger Behind the Commvault Breach appeared first on AppOmni ... Read More
Salesforce Account Takeover via Doubleclick

OAuth Grants and Phishing: A Deadly Combination

A phishing campaign that compromised over 12,000 GitHub repositories highlights how a seemingly harmless email can have large-scale repercussions. As awareness of email phishing grows, attackers have evolved their tactics—shifting from sending malicious links to creating convincing, bogus websites. Today, they’re targeting a new and powerful attack vector: OAuth 2.0 ... Read More