Information security
fromComputerworld
5 days agoNew phishing campaign tricks employees into bypassing Microsoft 365 MFA
Attackers trick employees into registering a hacker-controlled device via OAuth device authorization, granting persistent access to Microsoft accounts and bypassing MFA.