Tag · 2 articles

EntraID

Jul 17, 2026 · 6 min read

3 OAuth TTPs Seen This Month — and How to Detect Them with Entra ID Logs

Discover the latest OAuth TTPs and learn how to detect them using Entra ID logs. Protect your applications from attacks with practical security measures.

Jun 3, 2026 · 8 min read

OAuth Device Code Flow Security: How to Detect and Prevent Device Code Phishing

OAuth device code phishing (RFC 8628 abuse) bypasses MFA and steals M365 refresh tokens without a password. Learn how to disable device authorization grant in Entra ID, Keycloak, Auth0, and detect attacks with SIEM rules.