Security News > 2020 > July > Microsoft Warns on OAuth Attacks Against Cloud App Users
Against the backdrop of widespread remote working and the increased use of collaboration apps, attackers are ramping up application-based attacks that exploit OAuth 2.0, Microsoft is warning.
An offensive starts when an attacker registers a malicious app with an OAuth 2.0 provider, such as Microsoft's own Azure Active Directory.
Users can protect themselves by ensuring that whatever app they're signing into is actually legitimate.
As remote working continues and collaboration apps such as Zoom, Webex Teams, Box and Microsoft Teams become ubiquitous, users are getting more and more used to cloud apps and signing into them using the OAuth function, Girling warned.
"As a result, organizations around the world have scaled up cloud services to support collaboration and productivity from homeWith increased cloud app usage and the shift to working from home, security and how employees access company resources are even more top of mind for companies."
News URL
https://threatpost.com/microsoft-warns-oauth-attacks-cloud-app/157331/
Related news
- CISA tags Microsoft .NET and Apache OFBiz bugs as exploited in attacks (source)
- Critical RCE bug in Microsoft Outlook now exploited in attacks (source)
- Microsoft Identifies 3,000 Leaked ASP.NET Keys Enabling Code Injection Attacks (source)
- Microsoft Uncovers Sandworm Subgroup's Global Cyber Attacks Spanning 15+ Countries (source)
- Microsoft: Hackers steal emails in device code phishing attacks (source)
- Microsoft fixes Power Pages zero-day bug exploited in attacks (source)
- Botnet targets Basic Auth in Microsoft 365 password spray attacks (source)
- FatalRAT Phishing Attacks Target APAC Industries Using Chinese Cloud Services (source)
- New ClickFix attack deploys Havoc C2 via Microsoft Sharepoint (source)
- Malicious Adobe, DocuSign OAuth apps target Microsoft 365 accounts (source)