info@news-matic.com

details

enabled device code phishing campaign exploits OAuth flow for account takeover

Microsoft uncovered an AI-driven device code phishing campaign that uses automation to bypass authentication and compromise accounts at scale. A phishing campaign that bypasses the standard 15-minute expiration window through automation and dynamic code generation, leveraging the OAuth Device Code Authentication flow to compromise organizational accounts at scale, has been observed by the M... [3816 chars]

Cookie Consent + Tracking