Hosted on MSN
State actors are abusing OAuth device codes to get full M365 account access - here's what we know
Proofpoint reports phishing surge abusing Microsoft OAuth 2.0 device code flow Victims enter codes on real Microsoft domains, granting attackers access tokens Proofpoint advises blocking device code ...
A new wave of device code phishing shows how threat actors are scaling account compromise using AI and end‑to‑end automation.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results