Attackers Hijack Microsoft 365 Accounts Through OAuth Device Code Abuse Without Stealing Passwords
12/03/2026-18:25 12/03/2026-18:30 מחשבים וטכנולוגיה Cyber Security News דיווח
.webp)
Analysts at ANY.RUN has identified a sharp spike in phishing campaigns exploiting Microsoft’s OAuth Device Authorization Grant flow, with more than 180 malicious URLs detected within a single week. Unlike conventional credential harvesting, this tech
.webp){kind=icon}
.png){kind=icon}