Azure Password-Spraying Attack Bypasses MFA Defenses

A password-spraying campaign has breached dozens of Microsoft Office 365 accounts by exploiting a deprecated OAuth 2.0 feature, allowing attackers to bypass multifactor authentication controls and obt

Original source: BankInfoSecurity.com RSS Syndication