0
Deep & Emerging Tech·September 3, 2026·1 min read

Clicking 'Allow' on a Google and Microsoft permission screens could give hackers access to your entire account, FBI warns

Share

OAuth consent phishing turns a single careless click into full-account compromise — bypassing passwords and MFA entirely. If you run SaaS or internal tools, tighten app consent policies, pre-approve trusted integrations, and train users that “Allow” is now as sensitive as typing their password.