4 million fake applications and one blind spot: A SOC playbook for OAuth client ID spoofing

Key takeaways OAuth client ID spoofing defeats detections that key off application name or a known application ID, because the field itself is fabricated, ro...