#
DIFF.BLOG
New
Following
Discover
Jobs
More
Top Writers
Suggest a blog
Upvotes plugin
Report bug
Contact
About
Privacy
Sign up
The home for great developer writing.
We surface the best developer writing from thousands of independent blogs, updated daily.
Join Diff.blog
TOPICS
Device Code Phishing: Microsoft 365 Attack That Steals No Passwords
·
Securityonline
·
June 20, 2026, 2:21 a.m.
Cybercriminals
Account Takeover
Device Authorization Grant
Device Code Phishing
Cybersecurity
Phishing
Microsoft 365
Security Techniques
Summary
The blog post discusses a new phishing technique targeting Microsoft 365 that operates without stealing passwords. It highlights a real-world campaign discovered by ReversingLabs, emphasizing the evolution of phishing methods in cybersecurity.
Read full post on securityonline.info →
MORE POSTS LIKE THIS
ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365
Blog Talosintelligence ·
Jul 1, 2026
Threat Advisory
Cybersecurity
Microsoft hits PhaaS platform EvilTokens in 40th cybercrime operation
Thestack ·
Sep 23, 2026
microsoft
Cybercrime
A Sloppy Interface Is a Security Liability 
Jim Nielsen ·
Aug 20, 2026
Cybersecurity
software development
Blackstone, KKR and CME targeted in vishing wave tied to BlackFile crew
Siliconangle ·
Aug 7, 2026
News
Security
Google Is Suing Chinese Scammers Who Are Using Gemini
Bruce Schneier ·
Jul 7, 2026
AI
china
Inherited Circuits, Learned Semantics: How Security Fine-Tuning Can Create Hidden Evasion Risk
Blogs Cisco ·
Jun 29, 2026
Artificial Intelligence (AI)
AI Security
Discover more posts →
AUTHOR
Advertise
Sponsor diff.blog
Put your product in front of developers who read and write about their craft. One exclusive sponsor at a time.
Become a sponsor →
RECENT POSTS FROM THE AUTHOR
Choose how you want to continue.
Continue with GitHub
Continue with Google
By continuing, you agree to our
Privacy Policy
.