The New Phishing Click: How OAuth Consent Bypasses MFA
Medium Severity
Global
Date OccurredMay 19, 202611:30 UTC
Event TypeCyber Intelligence
SourceTheHackerNews
RecordedMay 19, 2026
Full Description
In February 2026, a phishing-as-a-service (PhaaS) platform called EvilTokens went live. Within five weeks, it had compromised more than 340 Microsoft 365 organizations across five countries.
Th