> Microsoft 365 accounts targeted in wave of OAuth phishing attacks
[AUTHOR: Bill Toulas]
[DATE: 19/12/2025 17:19]
[LANGUAGE: EN]
Multiple threat actors are compromising Microsoft 365 accounts in phishing attacks that leverage the OAuth device code authorization mechanism. [...]