GitHub has confirmed that hackers used stolen OAuth tokens in a cyber incident last week. GitHub also shared a timeline of breaches for April 2022, encompassing the information related to when threat actors gained access and stole private repositories belonging to dozens of organizations. GitHub stated that it does not

Microsoft has warned that Office 365 customers are receiving phishing emails that aim to trick unsuspecting users into giving OAuth permissions to an app that allows attackers to read and write emails. The OAuth phishing emails were delivered to hundreds of Office 365 customers, warned the Microsoft Security Intelligence team.