Proofpoint has warned about phishing campaigns abusing legitimate device authorization flow to bypass MFA and gain persistent access.
Threat Groups Hijack Microsoft 365 Accounts Using OAuth Device Code Exploit Security researchers warn that threat groups are ...