[rwth-security] Hackers abuse OAuth 2.0 workflows to hijack Microsoft 365 accounts