The Microsoft Defender Security Research Team has confirmed that a pervasive new authentication code attack is compromising ...

The phishing-as-a-service toolkit leverages legitimate authentication to capture tokens and access Microsoft 365 services.

Hundreds of organizations have been compromised daily by a Microsoft device-code phishing campaign that uses AI and ...

Device code phishing attacks that abuse the OAuth 2.0 Device Authorization Grant flow to hijack accounts have surged more ...

A new wave of device code phishing shows how threat actors are scaling account compromise using AI and end‑to‑end automation.

Microsoft this week says it has uncovered a large-scale, sophisticated AI-driven phishing campaign that uses automation and legitimate authentication processes to compromise accounts more effectively ...

Threat actors using a previously undocumented phishing-as-a-service (PhaaS) platform called "VENOM" are targeting credentials ...

Compare the best multi-factor authentication software in 2026. See which MFA tools offer adaptive security, easy setup, and ...

I have long encouraged the use of two-factor authentication (2FA) or two-step verification (2SV) with online accounts whenever possible (for more about the difference, see “Two-Factor Authentication, ...

Passwords are responsible for 80% of data breaches. Passwordless authentication eliminates the attack surface entirely. Here ...