M365 Token Replay Hits 79 Orgs - MFA Bypassed
M365 AitM token replay campaign breached 97 accounts across 79 orgs. Gheist steals GitHub secrets via Actions logs. AI agent hijacked by AGENTS.md file.
Posts tagged: Token-Theft
OAuth Token Theft: Hijacking App Permissions Without Stealing Passwords
OAuth 2.0 attack vectors - device code phishing, open redirects, illicit consent grants - with curl examples, Microsoft Graph detection queries, and defense …