Attackers bypass MFA via OAuth consent phishing, tricking users into granting app access. Learn how to audit grants and tighten M365 policies.