Blackpoint demonstrates Microsoft 365 OAuth attack in webinar
MSFT•Blackpoint hosted a webinar demonstrating a simulated Microsoft 365 compromise in which malicious application consent sustained access despite a password reset. The demonstration showed containment within seconds and recommended administrator-controlled application consent and revoking malicious applications, sessions and tokens.
1. Simulated compromise
Blackpoint hosted a webinar demonstrating how malicious application consent in a simulated Microsoft 365 compromise could sustain access despite a password reset, exposing businesses to payment fraud and data theft. Containment occurred within seconds during the demonstration.
2. Recommended safeguards
The webinar recommended administrator-controlled application consent and revocation of malicious applications, sessions and tokens.
