The Microsoft Defender Security Research Team has confirmed that a pervasive new authentication code attack is compromising ...

Hundreds of organizations have been compromised daily by a Microsoft device-code phishing campaign that uses AI and ...

Device code phishing attacks that abuse the OAuth 2.0 Device Authorization Grant flow to hijack accounts have surged more ...

A new wave of device code phishing shows how threat actors are scaling account compromise using AI and end‑to‑end automation.

A new malicious kit called EvilTokens integrates device code phishing capabilities, allowing attackers to hijack Microsoft ...

基于 OAuth 设备代码流滥用与 PaaS 基础设施托管的新型钓鱼攻击，标志着企业身份威胁进入合法协议劫持、可信资源伪装、无密码入侵的新阶段。Arctic Wolf 披露的 EvilTokens 相关活动表明，攻击者已实现攻击工业化、服务化、规模化 ...

The phishing-as-a-service toolkit leverages legitimate authentication to capture tokens and access Microsoft 365 services.

Proofpoint reports phishing surge abusing Microsoft OAuth 2.0 device code flow Victims enter codes on real Microsoft domains, granting attackers access tokens Proofpoint advises blocking device code ...