OAuth Client ID Spoofing Exploits Blind Spot in Microsoft Entra ID to Validate Stolen Credentials
Proofpoint has uncovered a novel evasion technique called OAuth client ID spoofing, exploited by at least two threat actors to validate stolen…
Tag: Account Enumeration
UNK_OutFlareAZ: OAuth Client ID Spoofing Campaign Targeting Microsoft Entra ID
UNK_OutFlareAZ is a threat cluster that exploited OAuth client ID spoofing starting December 2025, leveraging Cloudflare infrastructure to target over 2 million…