Skip to content
Threat Feed
Subscribe

Tag

Consent-Grant

1 brief RSS
medium advisory

M365 Identity OAuth Illicit Consent Grant by Rare Client and User

Adversaries may register a malicious application in Microsoft Entra ID and trick users into granting excessive permissions via OAuth consent, allowing the malicious application to access resources in Microsoft 365 on behalf of the user, potentially leading to data exfiltration.

Microsoft 365 +2 o365 oauth consent-grant phishing initial-access
2r 3t