Cybercriminals have launched a widespread phishing campaign exploiting Microsoft's OAuth device code flow to bypass MFA and ...

Financially motivated and nation-state threat groups are behind a surge in the use of device code phishing attacks that abuse Microsoft's legitimate OAuth 2.0 device authorization grant flow to trick ...

Proofpoint has warned about phishing campaigns abusing legitimate device authorization flow to bypass MFA and gain persistent ...

A surge in phishing campaigns abusing Microsoft’s OAuth device code authorization flow has been observed with multiple threat ...

A Russia-aligned threat group uses Microsoft 365 device code phishing to steal credentials and take over accounts, tracked ...

Cybercriminals, including state-sponsored threat actors, are increasingly abusing Microsoft’s OAuth 2.0 device code ...

My problem with taking the second option is that it's highly unlikely anyone will do the research needed to determine the true cause of a hack. CYA for the company rather than encouraging better ...

"Phishing-resistant MFA is the gold standard for security," according to Microsoft's threat intel team. "No matter how much the cyber threat landscape changes, multifactor authentication still blocks ...

Microsoft is updating its Authenticator app to be even more "phishing-resistant," Microsoft announced Tuesday. Organizations use Authenticator to implement multifactor authentication (MFA) on iOS and ...