
The Microsoft device code phishing attack is a sophisticated cyber threat that manipulates the OAuth device authorization flow to bypass multi-factor authentication (MFA) and gain unauthorized access to Microsoft 365 accounts. According to recent cybersecurity reports, over 55% of phishing attacks in 2024 have targeted Microsoft 365 users, emphasizing the growing vulnerability of cloud-based authentication […]
Cybercriminals are launching sophisticated attacks against Microsoft 365 and Gmail users with a new and dangerous phishing kit called Tycoon 2FA. This tool poses a serious threat because it bypasses two-factor authentication (MFA), a security measure many users rely on to protect their accounts. Tycoon 2FA: Multi-Stage Deception Security researchers at Sekoia discovered Tycoon 2FA […]