Security

<a href="https://bitcoinworld.co.in/microsoft-warns-that-cybercriminals-can-exploit-oauth-applications/" title="Microsoft Warns That Cybercriminals Can Exploit OAuth Applications" rel="noopener noreferrer nofollow"></a>
Microsoft’s security team <a href="https://thehackernews.com/2023/12/microsoft-warns-of-hackers-exploiting.html" rel="noopener noreferrer nofollow">has</a> warned that cybercriminals are exploiting a system called OAuth, which websites use to verify your identity.&nbsp;&nbsp;
The criminals hijack user accounts to give themselves special access to the system.&nbsp; By gaining control over these accounts, they can manipulate OAuth applications to gain extensive access and permissions, thus facilitating various forms of cybercrime, including illicit crypto mining.
<h3 id="span-style-font-weight-400-how-the-oauth-exploit-works-span">How The OAuth Exploit Works</h3>
The exploitation of OAuth applications presents a complex challenge. Attackers first compromise user accounts through phishing or password-spraying attacks, particularly targeting accounts lacking strong authentication mechanisms.&nbsp;&nbsp;
These accounts are then used to deploy VMs for crypto mining, establish persistence in the aftermath of BEC and launch spamming activities using the organization’s resources.&nbsp;
Microsoft has tracked these activities extensively, enhancing the detection of malicious OAuth applications through tools like Microsoft Defender for Cloud Apps and preventing compromised accounts from accessing resources.&nbsp;
See Also: <a class="row-title" href="https://bitcoinworld.co.in/microsoft-plans-to-launch-ai-focused-windows-in-2024/" aria-label="“Microsoft Plans To Launch AI-Focused Windows In 2024” (Edit)" rel="noopener noreferrer nofollow">Microsoft Plans To Launch AI-Focused Windows In 2024</a>
<h3 id="span-style-font-weight-400-how-to-mitigate-the-risks-span">How To Mitigate The Risks&nbsp;</h3>
Microsoft’s analysis of these attacks has led to several recommendations for organizations to mitigate such threats.&nbsp;&nbsp;
First, securing identity infrastructure is critical. The majority of the compromised accounts did not have multifactor authentication (MFA) enabled.&nbsp;
This made them vulnerable to credential-guessing attacks. Implementing MFA can dramatically reduce the risk of such attacks.&nbsp;
In addition to MFA, Microsoft advises enabling conditional access policies and continuous access evaluation, which revoke access in real time when risks are detected.&nbsp;&nbsp;
Security defaults in Azure AD provide essential protection for organizations, especially those on the free tier of Azure Active Directory licensing.&nbsp;
These include preconfigured security settings like MFA and protection for privileged activities. Organizations are also encouraged to audit apps and the permissions they have been granted to ensure they adhere to the principles of least privilege.
The post <a href="https://bitcoinworld.co.in/microsoft-warns-that-cybercriminals-can-exploit-oauth-applications/" rel="noopener noreferrer nofollow">Microsoft Warns That Cybercriminals Can Exploit OAuth Applications</a> appeared first on <a href="https://bitcoinworld.co.in" rel="noopener noreferrer nofollow">BitcoinWorld</a>.

Microsoft Warns That Cybercriminals Can Exploit OAuth Applications

Table of Contents

ItsBitcoinWorld

Other articles published on Dec 14, 2023

Shiba Inu's Shytoshi Kusama Sparks SHIB Army's Ecstatic Response

These Factors Confirm a New Record in Bitcoin Price!

CFTC proposes new rules to safeguard customer funds in derivatives trading

GameStop Memes Coin's $4M Presale Sinks Binance Shakeup News, Investors See 100x Potential

Render (RNDR) Jumps Into Top 50 After 1,100% Price Increase in 2023

Hitachi and Concordium collaborate to create a biometric crypto wallet

Join our free newsletter for daily crypto updates!