Proofpoint details OAuth client ID spoofing, a stealthy account enumeration technique that probes Microsoft Entra ID without a successful sign-in event.
#OAuthSpoofing #EntraID #AccountEnumeration #CloudSecurity #Proofpoint
http://securityonline.info/oauth-client-id-spoofing/?utm_source=mastodon&utm_medium=jetpack_social