The Hacker News and Steven Lim describe a large-scale device-code phishing campaign abusing OAuth device code flows to obtain tokens that remain usable even after password resets.
🛑 A device code phishing campaign is hitting 340+ Microsoft 365 orgs using OAuth abuse.
Victims enter codes on real Microsoft pages, generating access and refresh tokens attackers reuse—even after password resets.
A large-scale phishing campaign has impacted more than 340 Microsoft 365 organizations across the U.S., Canada, Australia, New Zealand, and Germany.
The attackers are exploiting device code authentication flows to steal
A device code phishing campaign is hitting 340+ Microsoft 365 orgs using OAuth abuse.
A large-scale phishing campaign has impacted more than 340 Microsoft 365 organizations
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new expert voices, debates, and emerging ideas.
← Back to Cyber Security