AI-enabled phishing-as-a-service operations are driving a sharp increase in identity attacks in 202620262026, with threat actors increasingly abusing OAuth device authorization flows and Microsoft Entra ID device enrollment to obtain durable access to SaaS environments. Jalisco is a device code phishing toolkit that generates OAuth device codes in real time and captures the tokens issued […]

The post Hackers Abuse OAuth Device Codes and Entra ID Enrollment for Persistent SaaS Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Mayura Kathir

Source: gbHackers
Source Link: https://gbhackers.com/oauth-device-codes-and-entra-id-abused/