by Jesper Kråkhede, Sweden
Posted in Security Architecture on Aug 27th, 2025
This month an attacker stole OAuth tokens from a chat integration used by a sales automation platform. With those tokens, the attacker could read data from the customers´ CRM systems directly, without logging in, without passwords and without MFA. Researchers have mentioned more than 700 potentially affected organisations. The attacker searched the data for credentials, […]
Active Directory AI AI agents AI governance Automation Business Cloud security Compliance Cost Credential Theft Data protection Detection Device management Governance Identity Incident response Information classification Legacy Logging Methodology Microsoft Microsoft Defender Microsoft Digital Defense Report Microsoft Sentinel Organisation OT Patching PAW Personal Privileged access Ransomware Remote access Remote work Risk management Security Architecture Security strategy Service Providers SOC SPA Statistics Supply chain Threat intelligence VPN Vulnerabilities Zero Trust