The New Phishing Click: How OAuth Consent Bypasses MFA
- Posted on May 19, 2026
- By The Hacker News
- 0 Views
- 1 min read
The New Phishing Click: How OAuth Consent Bypasses MFA
OAuth consent is the phishing vector MFA misses—long-lived tokens and cross-app access bypass trusted identity controls.