Device code phishing uses the real microsoft.com/devicelogin page. MFA succeeds, the attacker gets the tokens. Block Authentication flows > Device code in Conditional Access, report-only first.
block
![[Power Platform: Block Public Non‑Production Power Pages]](https://i0.wp.com/ailonalab.com/wp-content/uploads/2026/04/power_platform_blo_scrapedjpg-jpg.webp?resize=800%2C533&ssl=1)
[Power Platform: Block Public Non‑Production Power Pages]
Microsoft Power Platform now lets admins block non-production Power Pages sites from being made public. Using … [Power Platform: Block Public Non‑Production Power Pages]Read more
Microsoft Intune preview: block automatic MDM enrollment
Microsoft Intune introduces a public preview toggle to block automatic MDM enrollment during Windows modern app … Microsoft Intune preview: block automatic MDM enrollmentRead more