Search: “device code phishing”

92 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 662 Ransomware 477 Vulnerability 357 Phishing & fraud 296 Exploit / PoC 238 Threat actor 223 Data breach 206 Policy & legal 55 Advisory 22 Industry 16 AI safety & security 10 Research 7 Tools 2 AI policy 1

SeverityAll critical 1087 high 749 medium 689 low 15 info 33

OAuth Device Code Phishing Campaigns Surge Targets Microsoft 365

Infosecurity MagazineDec 18, 16:00 UTC · Dec 18, 2025Threat actor

45

AI-enabled device code phishing campaign exploits OAuth flow for account takeover

Help Net SecurityApr 7, 00:00 UTC · Apr 7, 2026Threat actor1

45

ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365

Cisco TalosJul 1, 10:00 UTC · Jul 1, 2026Threat actor1

45

Amazon Disrupts APT29 Watering Hole Campaign Abusing Microsoft Device Code Authentication

The Hacker NewsAug 30, 04:26 UTC · Aug 30, 2025Threat actor

45

Russian APT29 Exploits Gmail App Passwords to Bypass 2FA in Targeted Phishing Campaign

The Hacker NewsJun 19, 08:14 UTC · Jun 19, 2025Threat actor

45

Microsoft Flags Mass Phishing Campaign Using Fake Compliance Emails

Infosecurity MagazineMay 5, 16:00 UTC · May 5, 2026Threat actor

45

Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsApp

The Hacker NewsApr 30, 09:51 UTC · Apr 30, 2025Threat actor1

45

PoisonSeed Attack Turns Out to Be Not a FIDO Bypass After All

The Hacker NewsJul 26, 11:39 UTC · Jul 26, 2025Threat actor

45

Quishing Campaigns Spike 50% in September

Infosecurity MagazineNov 9, 13:00 UTC · Nov 9, 2023Threat actor

45

Voice Phishers Targeting Corporate VPNs

Krebs on SecurityAug 19, 14:05 UTC · Aug 19, 2020Threat actor

45

New FBI Alert: Russian Intelligence Uses Signal Recovery Keys to Access Messages

Security AffairsJun 27, 16:08 UTC · Jun 27, 2026Threat actor

45

Android 7.0+ Phones Can Now Double as Google Security Keys

Krebs on SecurityApr 11, 17:12 UTC · Apr 11, 2019Threat actor

45

Russia-linked actors target WhatsApp and Signal in phishing campaign

Security AffairsMar 22, 19:21 UTC · Mar 22, 2026Threat actor

45

Moroccan cybercrime group Atlas Lion hiding in plain sight during attacks on retailers

The RecordApr 10, 13:30 UTC · Apr 10, 2025Threat actor

45

Operation Emmental campaign is targeting banking sector

Security AffairsOct 15, 18:45 UTC · Oct 15, 2017Threat actor

45

Quishing Campaign Targets Chinese Citizens via Fake Official Documents

Infosecurity MagazineJun 19, 14:00 UTC · Jun 19, 2024Threat actor

45

Phishing campaign used QR codes to target large energy company

The RecordAug 16, 20:37 UTC · Aug 16, 2023Threat actor

45

How threat actors are using AI and other modern tools to enhance their phishing attempts

Cisco TalosApr 13, 04:48 UTC · Apr 13, 2023Threat actor

45

Recent ‘MFA Bombing’ Attacks Targeting Apple Users

Krebs on SecurityApr 2, 20:30 UTC · Apr 2, 2024Threat actor

45

Chinese Threat Actors Shift to Live Credential Interception

Infosecurity MagazineMay 26, 14:45 UTC · May 26, 2026Threat actor

45

Chinese Smishing Campaigns Compromise up to 115 Million US Payment Car

Infosecurity MagazineAug 5, 16:30 UTC · Aug 5, 2025Threat actor

45

Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 Countries

The Hacker NewsMay 5, 07:46 UTC · May 5, 2026Threat actor

45

Signal Phishing Campaign Targets Journalists and Activists to Steal Backup Recovery Keys

Security AffairsMay 30, 09:27 UTC · May 30, 2026Threat actor

45

FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys

The Hacker NewsJun 26, 19:38 UTC · Jun 26, 2026Threat actor

45

Out with the old and in with the improved: MFA needs a revamp

Help Net SecurityJan 19, 00:00 UTC · Jan 19, 2024Threat actor

45

Stealth Cell Tower, how to spy on workers with a harmless printer

Security AffairsNov 2, 10:46 UTC · Nov 2, 2016Threat actor

45

Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2026Threat actor

45

Hackers Steal Steam Credentials Novel 'Browser-in-the

Infosecurity MagazineSep 13, 16:00 UTC · Sep 13, 2022Threat actor

45

GhostPairing campaign abuses WhatsApp device linking to hijack accounts

Security AffairsDec 18, 08:47 UTC · Dec 18, 2025Threat actor

45

Machete espionage campaign continues to target LATAM countries

Security AffairsAug 5, 12:53 UTC · Aug 5, 2019Threat actor

45

QR codes are getting colorful, fancy, and dangerous

Help Net SecurityJan 15, 00:00 UTC · Jan 15, 2026Threat actor

45

Signal phishing campaign targets Germany’s Bundestag President Julia Klöckner

Security AffairsApr 24, 13:58 UTC · Apr 24, 2026Threat actor

45

Nearly 1,900 Signal Messenger Accounts Potentially Compromised in Twilio Hack

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2022Threat actor

45

Microsoft warns of global campaign stealing auth tokens from 35K users

Security AffairsMay 5, 09:10 UTC · May 5, 2026Threat actor

45

Russian Star Blizzard Targets WhatsApp Accounts in New Spear

The Hacker NewsJan 17, 02:08 UTC · Jan 17, 2025Threat actor

45

Hackers Using PDFs to Impersonate Microsoft, DocuSign, and More in Callback Phishing Campaigns

The Hacker NewsJul 22, 07:17 UTC · Jul 22, 2025Threat actor

45

Phishing Campaign Compromises 100+ Ukrainian Government Computers

Infosecurity MagazineAug 13, 15:00 UTC · Aug 13, 2024Threat actor

45

Amazon shuts down watering hole attack attributed to Russia’s APT29 hacking group

The RecordSep 3, 00:03 UTC · Sep 3, 2025Threat actor1

45

Russian Star Blizzard hackers exploit WhatsApp accounts to spy on nonprofits aiding Ukraine

The RecordJan 17, 13:42 UTC · Jan 17, 2025Threat actor

45

Hackers are targeting teleworkers with vishing campaign,CISA/FBI warn

Security AffairsAug 22, 06:59 UTC · Aug 22, 2020Threat actor

45