Device code phishing uses the real microsoft.com/devicelogin page. MFA succeeds, the attacker gets the tokens. Block Authentication flows > Device code in Conditional Access, report-only first.
phishing
Tax-season phishing targets W-2 and CPA
Microsoft observed tax-season phishing campaigns leveraging W-2, CPA, and IRS lures. Attackers use phishing-as-a-service kits, QR … Tax-season phishing targets W-2 and CPARead more
How to Defend Against OAuth Consent Phishing with Microsoft Entra Policies and Publisher Verification
OAuth consent phishing exploits the OAuth 0 protocol by tricking users into granting malicious apps access … How to Defend Against OAuth Consent Phishing with Microsoft Entra Policies and Publisher VerificationRead more
Microsoft Security Copilot Transforms Phishing Email Triage with AI-Driven Intent Detection and Seamless Sentinel Integration
Microsoft Security Copilot revolutionizes phishing email triage by automating analysis using AI-driven intent detection. Deployed in … Microsoft Security Copilot Transforms Phishing Email Triage with AI-Driven Intent Detection and Seamless Sentinel IntegrationRead more