Wildcard trust policies let any account assume privileged roles, opening multi‑tenant storage buckets to cross‑account snooping; quick remediation steps are outlined.
Read More
Category: Cloud and Identity Security
OAuth Consent Grant Abuse Enables Silent Corporate Inbox Persistence
Attackers are hijacking OAuth consent flows to gain long‑term, stealthy access to corporate mailboxes, and security teams are finally seeing the signs that expose this silent persistence technique.
Read More