OAuth client ID spoofing allows stealthy Microsoft Entra account enumeration
OAuth Client ID Spoofing Lets Bastards Quietly Poke Around Microsoft Entra Accounts Right, here’s the ugly little gist of it. Some clever bugger figured out that Microsoft Entra can be abused through OAuth client ID spoofing to...
