When MFA isn’t an option: The legacy of ROPC | Red Canary

Learn about a common authentication method for legacy applications and how you can reduce your application security risk.

When MFA isn’t an option: The legacy of ROPC | Red Canary Skip Navigation Get a Demo Products Managed Detection and Response AI Agents Threat Intelligence Automation Security Data Lake Managed Phishing Response Training & Tabletops What's New Plans Solutions By domain Identity Email Endpoint Cloud By technology Zscaler Microsoft CrowdStrike SentinelOne Palo Alto Networks AWS Google Linux & Kubernetes By Industry Financial Services Healthcare Technology Manufacturing Education Government Resources Blog Guides & Overviews Case Studies Videos Webinars Cybersecurity 101 Events Documentation Demo V

saved by

• Adithya V

related reading

• Legacy authentication: The curious case of BAV2ROPCredcanary.com
• Common Oauth Apps Used in Business Email Compromise - Syne's Cyber Cornercybercorner.tech
• Entra ID service principals in business email compromise schemes | Red Canaryredcanary.com
• Revoke user access in an emergency in Microsoft Entra ID - Microsoft Entra ID | Microsoft Learnlearn.microsoft.com
• Malicious Azure Application PERFECTDATA SOFTWARE and Microsoft 365 Business Email Compromise - Syne's Cyber Cornercybercorner.tech
• Exposing and shutting down an inbox heist in actionredcanary.com
• Mamba 2FA: A new contender in the AiTM phishing ecosystem - Sekoia.io Blogblog.sekoia.io
• Cloud coverage: Detecting an email payroll diversion attackredcanary.com
• PerfectData Software Abuse and Account Takeover Risksdarktrace.com
• Stytch - A better way to build authstytch.com
• My Apps Dashboard | Verkadaverkada.okta.com
• Anomalies detected by the Microsoft Sentinel machine learning engine | Microsoft Learnlearn.microsoft.com