How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

ConsentFix: OAuth Phishing That Bypasses MFA in Microsoft Entra ID

calendar_today September 29, 2026 domain mitiga

ConsentFix abuses OAuth consent in Microsoft Entra ID to steal access tokens without triggering MFA. How the attack works and how to detect it.

open_in_new Read original post