… Download Now Related Articles: Signal adds security warnings for social engineering, phishing attacks NVIDIA confirms GeForce NOW data breach affecting Armenian users Microsoft: Teams increasingly abused in helpdesk impersonation attacks Over 100 Chrome Web Store extensions steal user accounts, dat… …
… The platform uses device code phishing, an increasingly popular method that abuses Microsoft's legitimate OAuth 2.0 Device Authorization grant flow to gain access to Microsoft Entra and Microsoft 365 accounts. …
Tycoon2FA hijacks Microsoft 365 accounts via device-code phishing By Bill Toulas May 17, 2026 10:43 AM The Tycoon2FA phishing kit now supports device-code phishing attacks and abuses Trustifi click-tracking URLs to hijack Microsoft 365 accounts. …
… Microsoft Office remains one of the most abused attack surfaces because it sits at the intersection of human behavior, daily operations, and business continuity. …
… Download Now Related Articles: Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit Recently leaked Windows zero-days now exploited in attacks Microsoft April 2026 Patch Tuesday fixes 167 flaws, 2 zero-days Microsoft March 2026 Patch Tuesday fixes 2 zero-days, 79 flaws Windows 11 and … …