Anatomy of a decoy: what happens when someone uses a stolen credential
C1, a credential security provider, has introduced decoy credentials that trigger a CRITICAL 'Decoy credential used' finding when a stolen credential is used, while returning a standard OAuth error to…