What the Turla SharePoint Exploit Teaches About OAuth Token Scope, Client-Side State, and Blind Trust in Microsoft 365 APIs
pr0h0•
An analysis of how Turla’s SharePoint exploitation exposed the risks of overly broad OAuth token scope, fragile client-side state, and blind trust in Microsoft 365 APIs while affecting thousands of French user accounts.
sharepointoauthmicrosoft-365
