Cybercriminals have launched a widespread phishing campaign exploiting Microsoft's OAuth device code flow to bypass MFA and ...
Financially motivated and nation-state threat groups are behind a surge in the use of device code phishing attacks that abuse Microsoft's legitimate OAuth 2.0 device authorization grant flow to trick ...
A Russia-aligned threat group uses Microsoft 365 device code phishing to steal credentials and take over accounts, tracked ...
Multiple Russian nation-state actors are targeting sensitive Microsoft 365 accounts via device code authentication phishing, a new analysis by Volexity has revealed. The firm first observed this ...
3don MSN
State actors are abusing OAuth device codes to get full M365 account access - here's what we know
Cybercriminals, including state-sponsored threat actors, are increasingly abusing Microsoft’s OAuth 2.0 device code ...
"Phishing-resistant MFA is the gold standard for security," according to Microsoft's threat intel team. "No matter how much the cyber threat landscape changes, multifactor authentication still blocks ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback