Highlight from ToddyCat’s Umbrij Malware Hijacks Gmail Access Using OAuth Tokens Instead of Passwords

Security teams should regularly review OAuth applications connected to corporate Google accounts and remove any that are unnecessary or unfamiliar.