Aug 22025 Attackers Use Fake OAuth Apps with Tycoon Kit to Breach Microsoft 365 Accounts Hackers used fake Microsoft OAuth apps to target 3,000+ accounts across 900 environments in 2025.