#refreshtokenattacks — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #refreshtokenattacks, aggregated by home.social.
-
OAuth Grants Expose Hidden Attack Vector in Enterprise Workspaces
Unmanaged OAuth grants are a ticking time bomb in enterprise workspaces, with 80% of security leaders recognizing them as a critical or significant risk. A recent attack by threat actor UNC6395 exploited valid OAuth refresh tokens to breach Salesforce environments of over 700 organizations, highlighting the devastating…
#OauthSecurityRisk #UnmanagedOauthGrants #RefreshTokenAttacks #Unc6395 #Salesforce