#device-code-phishing

Threat Intelligence

Tycoon2FA Hijacks Microsoft Accounts via Device-Code Phishing

Cybercriminals are exploiting a legitimate Microsoft feature to gain unfettered access to cloud accounts. The resurfaced Tycoon2FA phishing kit highlights a sophisticated new attack vector.

Threat Intelligence

AI-Driven Device Code Phishing Scales Up Attacks on Corporate Logins

Hackers aren't just phishing anymore—they're automating AI-fueled device code grabs at enterprise scale. Microsoft's latest alert shows why this matters for every Microsoft 365 user.

Compliance & Policy

EvilTokens: Phishing's Drag-and-Drop Nightmare for Microsoft Logins

EvilTokens just landed, and it's arming script kiddies with pro-level phishing tools for Microsoft accounts. Business email compromise? Now easier than ever.