The Rise of Federated SaaS Intrusions
ShinyHunters and Scattered Spider are vishing employees into completing legitimate OAuth logins for Salesforce, Okta, and Microsoft Entra, turning one compromised support call into federated SSO access across an organization's entire SaaS stack.