OAuth Attacks Target Microsoft 365, GitHub

Multiple active campaigns are abusing malicious OAuth applications — impersonating Adobe Acrobat/Drive, DocuSign, and fake GitHub security alerts — to redirect users to credential-phishing pages or to obtain full repository access; attackers request seemingly limited permissions to evade detection and enable account takeover, targeting organizations in healthcare, supply chain, retail, government across the US and Europe and more than 8,000 GitHub repositories.