In a recent study by Cybernews, applications tied to 10 different toys each requested permissions and privileges categorized as 'dangerous'.

Kali365 abuses the current OAuth device code flow on Microsoft accounts in a sophisticated attempt to dupe users into signing into their accounts