Greatness PhaaS adds device code phishing to bypass MFA and steal OAuth tokens alongside AiTM and consent abuse.

CERT-In issued a critical advisory as Microsoft monitors evolving phishing and identity threats targeting Microsoft 365 environments, aiming to compromise organisational accounts.

Researchers have uncovered a sustained and ongoing campaign by Russian spies that uses a clever phishing technique to hijack Microsoft 365 accounts belonging to a wide range of targets, researchers ...

The FBI has warned about a phishing tool called Kali365 that can bypass two-factor authentication on Microsoft 365 accounts. The subscription-based kit uses OAuth device code flow to steal access ...