Microsoft 365 OAuth Consent Defense
Why Conditional Access will not stop OAuth consent attacks (and what will)
CA gates sign-in. Consent happens after sign-in. Real prevention lives in three Entra ID consent-framework settings most established …
Gmail BitM Defense
BitM Shield and the broader posture, what actually stops Browser-in-the-Middle
BitM Shield is a free Chrome extension we built and verified in our research lab. It blocks the …
Microsoft 365 Device Code Defense
Blocking device code phishing in Microsoft 365, the CA policy that closes the flow
One Conditional Access policy blocks the entire device code flow. Most tenants have never deployed it. Here is …