OAuth Grants Expose Hidden Attack Vector in Enterprise Workspaces

Unmanaged OAuth grants are a ticking time bomb in enterprise workspaces, with 80% of security leaders recognizing them as a critical or significant risk. A recent attack by threat actor UNC6395 exploited valid OAuth refresh tokens to breach Salesforce environments of over 700 organizations, highlighting the devastating…

https://osintsights.com/oauth-grants-expose-hidden-attack-vector-in-enterprise-workspaces?utm_source=mastodon&utm_medium=social

#OauthSecurityRisk #UnmanagedOauthGrants #RefreshTokenAttacks #Unc6395 #Salesforce