#
DIFF.BLOG
New
Following
Discover
Jobs
More
Top Writers
Suggest a blog
Upvotes plugin
Report bug
Contact
About
Sign up
The home for great developer writing.
We surface the best developer writing from thousands of independent blogs, updated daily.
Join now
→
Learn more
TOPICS
Device Code Phishing: Microsoft 365 Attack That Steals No Passwords
1
·
Securityonline
·
June 20, 2026, 2:21 a.m.
Cybercriminals
Account Takeover
Device Authorization Grant
Device Code Phishing
Phishing
Cybersecurity
Microsoft 365
Security Techniques
Summary
The blog post discusses a new phishing technique targeting Microsoft 365 that operates without stealing passwords. It highlights a real-world campaign discovered by ReversingLabs, emphasizing the evolution of phishing methods in cybersecurity.
Read full post on securityonline.info →
MORE POSTS LIKE THIS
ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365
Blog Talosintelligence ·
Jul 1, 2026
Threat Advisory
Phishing
Google Is Suing Chinese Scammers Who Are Using Gemini
Bruce Schneier ·
Jul 7, 2026
AI
china
Inherited Circuits, Learned Semantics: How Security Fine-Tuning Can Create Hidden Evasion Risk
Blogs Cisco ·
Jun 29, 2026
Artificial Intelligence (AI)
AI Security
The Good, the Bad and the Ugly in Cybersecurity – Week 25
Sentinelone ·
Jun 19, 2026
Company
Cyber
UNC1151 ‘Ghostwriter’ Phishing Campaign Hijacks Gmail Accounts and 2FA Codes
Securityonline ·
Jun 19, 2026
Cybercriminals
2FA phishing
Beyond Context Windows: When Malware Stops Fitting into Naive Automated Analysis
JP Dias ·
Jun 13, 2026
Phishing
vbs
Discover more posts →
AUTHOR
RECENT POSTS FROM THE AUTHOR
Choose how you want to continue.
Continue with GitHub
Continue with Google