A new attack type, dubbed ConsentFix v3, has been circulating on hacker forums, building on the previous technique by adding automation and scaling potential. [...]
ConsentFix v3 attacks target Azure with automated OAuth abuse
Summary + source link. No paywalls, no tracking.