Threat Actors Exploit OAuth Client ID Spoofing to Validate Stolen Microsoft Entra Credentials

Cybersecurity experts report that malicious actors are leveraging a new OAuth client ID spoofing technique in cloud environments. This method allows them to verify stolen Microsoft Entra ID credentials and enumerate user accounts without triggering security alerts, thereby enabling unauthorized access to various cloud services. The technique poses a significant threat to cloud security and identity management.