A Phishing Campaign Just Hit 340 Microsoft 365 Organizations in Five Countries — And Your Cloud Admin Panel Probably Cannot Detect It
Over 340 organizations hit by device code phishing that steals OAuth tokens surviving password resets. Here is how to detect it, respond, and lock down your Microsoft 365 tenant.