OAuth Under Siege: How Russian-Linked Hackers Are Weaponizing Trusted Login Flows to Breach Government and Defense Networks

OAuth Under Siege: How Russian-Linked Hackers Are Weaponizing Trusted Login Flows to Breach Government and Defense Networks

Microsoft has issued a stark warning to organizations worldwide: state-aligned threat actors are actively exploiting OAuth authentication workflows to compromise high-value targets in government, defense, and critical infrastructure sectors. The campaigns, which the company says are “operational, not theoretical,” represent a sophisticated evolution in phishing tactics that can slip past conventional email filtering and browser-based security co…