Security Boulevard

Attackers abuse OAuth’s built-in redirects to launch phishing and malware attacks

Researchers have found that attackers are abusing OAuth to send users from legitimate Microsoft or Google login pages to phishing sites or malware downloads.
Security Boulevard

MCP Authentication and Authorization Patterns

In MCP, every request comes from a nonhuman identity: an agent, server or tool. These identities don't act under direct human oversight. They generate requests dynamically, chain operations and carry ...
Microsoft

OAuth redirection abuse enables phishing and malware delivery

OAuth redirection is being repurposed as a phishing delivery path. Trusted authentication flows are weaponized to move users ...
Cybernews

Microsoft warning: attackers are abusing Google logins to spread malware

Microsoft has warned that attackers are abusing OAuth redirects to deliver phishing and malware via Entra ID and Google Workspace logins.
SiliconANGLE

Stytch and Cloudflare partner to secure Remote MCP servers with OAuth

Identity platform startup Stytch Inc. today unveiled Remote MCP Authorization, a new service created in partnership with Cloudflare Inc. that allows developers to add authorization to Remote MCP ...