SaaS RootKit Exploits Hidden Rules in Microsoft 365

A vulnerability within Microsoft’s OAuth application registration allows an attacker to create hidden forwarding rules that act as a malicious SaaS rootkit.

This article has been indexed from Dark Reading

Read the original article: