Threat actors abused open redirects on the Snapchat and American Express websites to steal credentials for Microsoft 365 accounts.
Further Reading
URL Redirection to Untrusted Site (‘Open Redirect’) (mitre.org)
Get some training sop this does not happen to you, or worse, your team.
Cyber Awake | Train Your Team To Protect Against Cyber Attacks
Please Note:
I am on leave so the news this week is “in brief”. You can still contact me via the contact page and Octagon Technology.
