DIFF.BLOG
New Following Discover Jobs
More
Top Writers Suggest a blog Upvotes plugin
Report bug Contact About Privacy
Sign up
Topics
Follow your own topics →
Menu
New Following Discover Jobs Top Writers
More
Suggest a blog Upvotes plugin Report bug Contact About
Sign up
Privacy Policy
The home for great developer writing.
We surface the best developer writing from thousands of independent blogs, updated daily.
Join Diff.blog
TOPICS

Device Code Phishing: Microsoft 365 Attack That Steals No Passwords

· Securityonline · June 20, 2026, 2:21 a.m.
Cybercriminals Account Takeover Device Authorization Grant Device Code Phishing Cybersecurity Phishing Microsoft 365 Security Techniques
Summary
The blog post discusses a new phishing technique targeting Microsoft 365 that operates without stealing passwords. It highlights a real-world campaign discovered by ReversingLabs, emphasizing the evolution of phishing methods in cybersecurity.
Read full post on securityonline.info →
MORE POSTS LIKE THIS
ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365
Blog Talosintelligence · Jul 1, 2026
Threat Advisory Cybersecurity
How attackers keep reading mail after M365 session revocation
Research Eye · Oct 29, 2026
Tech blog Cybersecurity
How to Identify Fake Hosting Renewal Emails
Neema Sharma · Oct 18, 2026
Cybersecurity Cybersecurity
Understanding AI-Generated Phishing Evasion
neemaasharma-boop · Oct 5, 2026
Cybersecurity Cybersecurity
Microsoft flags renewed attacks on hospitality Wi-Fi networks
Thestack · Oct 6, 2026
Security Cybersecurity
A Sloppy Interface Is a Security Liability 
Jim Nielsen · Aug 20, 2026
Cybersecurity software development
Discover more posts →
AUTHOR
RECENT POSTS FROM THE AUTHOR
Choose how you want to continue.
Continue with GitHub Continue with Google
By continuing, you agree to our Privacy Policy.