OAuth Client ID Spoofing Lets Attackers Enumerate Entra ID Accounts Without a Trace Cybercriminals OAuth Client ID Spoofing Lets Attackers Enumerate Entra ID Accounts Without a Trace Do Son July 20, 2026 0 At a Glance Field Detail Actors UNK_pyreq2323 and UNK_OutFlareAZ (two independent, unattributed clusters) Activity Account enumeration and... Read More Read more about OAuth Client ID Spoofing Lets Attackers Enumerate Entra ID Accounts Without a Trace
Do Son