Kev on Security Unlockedhttps://securityunlocked.com/tags/kev/Recent content in Kev on Security UnlockedHugoen-usThu, 02 Jul 2026 00:00:00 +0000Legacy OAuth as Attack Infrastructure: LSHIY's ROPC Spray and the MFA Bypass Built Into the Protocolhttps://securityunlocked.com/weekly-intelligence/legacy-oauth-as-attack-infrastructure-lshiys-ropc-spray-and-the-mfa-bypass-built-into-the-protocol/Thu, 02 Jul 2026 00:00:00 +0000https://securityunlocked.com/weekly-intelligence/legacy-oauth-as-attack-infrastructure-lshiys-ropc-spray-and-the-mfa-bypass-built-into-the-protocol/A coordinated password spray campaign exploited the deprecated ROPC OAuth flow to bypass MFA and Conditional Access across 64 organizations, while a CVSS 10.0 RMM auth bypass hit its federal remediation deadline today with payloads already targeting cloud and AI API keys.