Exploiting the Microsoft 365 Substrate: How First-Party OAuth Clients Became an MFA Bypass (VULN-154544)
VULN-154544: how a Conditional Access resource exclusion let a stolen password reach Microsoft 365 data across the tenant through first-party OAuth clients, with root cause, detection, and the fourteen-month MSRC disclosure.