build1 distinct publisher
81 million attempts, 78 accounts: ROPC is where "we have MFA" stops being true
A spraying campaign against Entra ID used OAuth's password grant for Azure CLI to get tokens with no MFA prompt. The lesson is about policy coverage, not about second factors.
Publishers:dev.to
Reality
- Evidence52
- Adoption58
- Hype gap+14
- Incentives62
- Confidence48