Device code flow attacks are exploding across Microsoft 365 environments in 2025, and they bypass many of the security controls organizations rely on, including FIDO2 keys, MFA, and conditional access. In this episode of Demystifying Microsoft, host Nathan Taylor breaks down exactly how these attacks work, why threat actor groups like Storm-2372 are leveraging phishing-as-a-service kits like Octopi365, FlowerStorm, and EvilTokens to industrialize the attack, as well as how to detect and block device code phishing in your own tenant.

Rss
Podden och tillhörande omslagsbild på den här sidan tillhör Sourcepass Center of Excellence for Microsoft. Innehållet i podden är skapat av Sourcepass Center of Excellence for Microsoft och inte av, eller tillsammans med, Poddtoppen.