OAuth app information is now available in attack paths (Preview)

April 2025

• OAuth app information is now available in attack paths (Preview)
• The Security Exposure Management platform now includes OAuth applications as part of the attack path and attack surface map experiences. This enhancement enables you to visualize how attackers could exploit OAuth apps to move laterally within your environment and access critical assets. By identifying these attack paths and investigating associated permissions, you can reduce exposure and improve the security posture of your Microsoft 365 services.

For more information, see Investigate OAuth application attack paths in Defender for Cloud Apps (Preview)