TLDR Tech / IT
Device Code Phishing Hits 340+ M365 Orgs - MFA Bypassed via Token Abuse
An active campaign is targeting Microsoft 365 tenants using device code phishing to capture authentication tokens, bypassing MFA, and maintaining access even after password resets. Attackers are exploiting modern auth flows, meaning traditional protections like MFA and password rotation don't fully stop account takeover once tokens are issued.
Read the full story