Hackers are abusing the legitimate OAuth redirection mechanism to bypass phishing protections in email and browsers to take users to malicious pages. [...]
Microsoft: Hackers abuse OAuth error flows to spread malware
Résumé + lien vers la source. Sans paywall, sans tracking.