UNIT 42
The Current Landscape of OAuth Attacks
MEDIUM OAuth identity security consent phishing token theft
Strategic summary
OAuth attacks are not classic malware attacks; they abuse trust in cloud apps and tokens, giving attackers long-lived access to M365 data without a password.
Relevance for you
OAuth attacks are not classic malware attacks; they abuse trust in cloud apps and tokens, giving attackers long-lived access to M365 data without a password.
Risk score
Review required 0
- cvss base
- 0.00
- kev bonus
- 0.00
- epss bonus
- 0.00
- poc bonus
- 15.00
- raw before weight
- 15.00
- industry weight
- 1.10
- freshness factor
- 0.50
- exploitability factor
- 1.00
- days old
- 14.00
- vendor mismatch penalty
- 0.00
- consensus penalty
- -8.00
Path: operational
Consensus check
The pipeline self-checks before delivery. These rules lowered the score:
-
VENDOR_MISMATCHVendor not found in alert title −5 -
TTP_SKIPPEDTTP mapping skipped (placeholder or aggregation article) −3
- Consensus penalty:
- −8.0
- Total penalty:
- −8.0