�� A device code phishing campaign is hitting 340+ Microsoft 365 orgs using OAuth abuse.

Victims enter codes on real Microsoft pages, generating access and refresh tokens attackers reuse—even after password resets.

�� Read → https://thehackernews.com/2026/03/device-code-phishing-hits-340-microsoft.html