A new variation of the ClickFix attack dubbed 'ConsentFix' abuses the Azure CLI OAuth app to hijack Microsoft accounts ...
An emergency patch from Google was rushed out so quickly that the vulnerability doesn't yet have an official CVE number.