Device Code Phishing Defeats All MFA, Including Passkeys, Report Warns
Device code phishing defeats all MFA by targeting authorization after login. Push Security tracks over 25 kits exploiting OAuth flows, with Microsoft reporting 10-15 new campaigns daily by April.
10h ago