Security News > 2020 > July > Microsoft Warns on OAuth Attacks Against Cloud App Users
Against the backdrop of widespread remote working and the increased use of collaboration apps, attackers are ramping up application-based attacks that exploit OAuth 2.0, Microsoft is warning.
An offensive starts when an attacker registers a malicious app with an OAuth 2.0 provider, such as Microsoft's own Azure Active Directory.
Users can protect themselves by ensuring that whatever app they're signing into is actually legitimate.
As remote working continues and collaboration apps such as Zoom, Webex Teams, Box and Microsoft Teams become ubiquitous, users are getting more and more used to cloud apps and signing into them using the OAuth function, Girling warned.
"As a result, organizations around the world have scaled up cloud services to support collaboration and productivity from homeWith increased cloud app usage and the shift to working from home, security and how employees access company resources are even more top of mind for companies."
News URL
https://threatpost.com/microsoft-warns-oauth-attacks-cloud-app/157331/
Related news
- Ransomware gang using stolen Microsoft Entra ID creds to bust into the cloud (source)
- Embargo ransomware escalates attacks to cloud environments (source)
- Ransomware attackers hop from on-premises systems to cloud to compromise Microsoft 365 accounts (source)
- DOJ, Microsoft seize 107 domains used in Russia's Star Blizzard phishing attacks (source)
- Microsoft and DOJ disrupt Russian FSB hackers' attack infrastructure (source)
- Microsoft issues 117 patches – some for flaws already under attack (source)
- Microsoft Detects Growing Use of File Hosting Services in Business Email Compromise Attacks (source)
- Microsoft: Ransomware Attacks Growing More Dangerous, Complex (source)
- Microsoft lost some customers’ cloud security logs (source)
- Notorious Hacker Group TeamTNT Launches New Cloud Attacks for Crypto Mining (source)