A new attack type, dubbed ConsentFix v3, has been circulating on hacker forums, building on the previous technique by adding automation and scaling potential. [...]
ConsentFix v3 attacks target Azure with automated OAuth abuse
Résumé + lien vers la source. Sans paywall, sans tracking.