A new phishing kit abuses a legitimate Microsoft device authorization flow to steal authentication tokens, register attacker-controlled devices and gain persistent access to a victim’s Microsoft 365 ...

Have you ever gone through the TV setup and Xbox setup process? If you do, you already know how difficult it is to set up these devices using the remote or the controller. It gets even more difficult ...

Suspected Russian threat actors are using OAuth-based phishing attacks to get targets to grant them access to their Microsoft 365 (M365) accounts. “The primary tactics observed involve the attacker ...

When you try to connect with Xbox, a Smart TV or a Windows app with your Microsoft account, it gets little tricky as you need to go through a couple of links to ...