An emergency patch from Google was rushed out so quickly that the vulnerability doesn't yet have an official CVE number.
A new variation of the ClickFix attack dubbed 'ConsentFix' abuses the Azure CLI OAuth app to hijack Microsoft accounts ...