nOAuth Vulnerability Still Affects 9% of Microsoft Entra SaaS Apps Two Years After Discovery

nOAuth Vulnerability Still Affects 9% of Microsoft Entra SaaS Apps Two Years After Discovery

/in

New research has uncovered continued risk from a known security weakness in Microsoft’s Entra ID, potentially enabling malicious actors to achieve account takeovers in susceptible software-as-a-service (SaaS) applications.
Identity security company Semperis, in an analysis of 104 SaaS applications, found nine of them to be vulnerable to Entra ID cross-tenant nOAuth abuse.
First disclosed by

The Hacker News – ​Read More

Anthropic just made every Claude user a no-code app developerAnthropic just made every Claude user a no-code app developerDire Wolf Ransomware Comes Out Snarling, Bites Technology, ManufacturingDire Wolf Ransomware Comes Out Snarling, Bites Technology, Manufacturing