Hackers are abusing the legitimate OAuth redirection mechanism to bypass phishing protections in email and browsers to take users to malicious pages.

OAuth redirection is being repurposed as a phishing delivery path. Trusted authentication flows are weaponized to move users ...

Threat actors are targeting technology, manufacturing, and financial organizations in campaigns that combine device code phishing and voice phishing (vishing) to abuse the OAuth 2.0 Device ...

Microsoft has identified a phishing campaign using malformed links to legitimate OAuth services to redirect to malware ...

Explore how AI agents enhance identity verification and authentication systems with smarter fraud detection and seamless user security.