Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le juillet 06, 2026, 12:00:22

Titre: [SecList]When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website
Posté par: igor51 le juillet 06, 2026, 12:00:22

When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website

The OAuth 2.0 Device Authorization Grant specification was designed to streamline authentication for Smart TVs, IoT devices, and printers. Today, threat actors are weaponizing it.
Source: When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website (https://securelist.com/microsoft-device-code-phishing-attack/120350/)