Fake OAuth client IDs let attackers confirm stolen Entra ID creds without a single logged sign-in. https://intel.threadlinqs.com/threat/TL-2026-2476 #ThreatIntel #pythonrequests #Microsoft #OAuth

Fake IT help desk calls trick employees into 'setting up a passkey' - then attackers own the M365 tenant. https://intel.threadlinqs.com/threat/TL-2026-2472 #ThreatIntel #Pink #pythonhttpx #pythonrequests