Microsoft: Hackers abuse OAuth error flows to spread malware

Published on March 3, 2026

Hackers are abusing the legitimate OAuth redirection mechanism to bypass phishing protections in email and browsers to take users to malicious pages. [...]