Inside an AIenabled device code phishing campaign

Reported 06 Apr 2026 by otx · Severity: medium

Microsoft Defender Security Research has observed a widespread phishing campaign leveraging the Device Code Authentication flow to compromise organizational accounts at scale. While traditional device code attacks are typically narrow in scope, this campaign demonstrated a higher