OAuth Abuse

OAuth Abuse focuses on the exploitation of token-based authentication and delegated authorization frameworks. As organizations increasingly rely on SaaS integrations, threat actors have pivoted from stealing passwords to hijacking active sessions and abusing "read-write" scopes. This tag tracks technical signatures of token theft, malicious app integrations, and the critical failure of over-permissioned third-party ecosystems.