Consent & Compromise: Abusing Entra OAuth for Fun and Access to Internal Microsoft Applications - Eye Research
research.eye.security
The Eye Security Research team has uncovered a new critical misconfiguration that exposed sensitive data at internal Microsoft applications.