Hackers Exploit OAuth Device Flow to Steal Microsoft 365 Tokens

Hackers are rapidly weaponizing a little-known Microsoft authentication feature to hijack enterprise accounts, as device code phishing surges across the threat landscape. The spike in activity is closely tied to the public release of criminal toolkits and phishing-as-a-service (PhaaS) platforms, making the once obscure technique widely accessible. New kits are appearing almost weekly, many seemingly […]

The post Hackers Exploit OAuth Device Flow to Steal Microsoft 365 Tokens appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.