Just as we think we’re getting one step ahead of cybercriminals, they find a new way to evade our defenses. The latest method causing trouble for security teams is that of device code phishing, a ...

New phishing campaigns attempt to evade detection by constructing rogue QR codes with special ASCII characters and load phishing pages locally using the local blob URL feature in browsers. Attackers ...

What if a simple scan of a QR code could compromise your most sensitive information? Imagine sitting at a café, scanning a code to access the menu, only to unknowingly hand over your login credentials ...

Threat Actors Exploit Microsoft Sway to Host QR Code Phishing Campaigns Your email has been sent A new report from cybersecurity company Netskope reveals details about attack campaigns abusing ...

Kaspersky reports a spike in phishing emails containing malicious QR codes. Detections for these jumped from 46,969 in August ...

Financially motivated and nation-state threat groups are behind a surge in the use of device code phishing attacks that abuse Microsoft's legitimate OAuth 2.0 device authorization grant flow to trick ...

Cybercriminals have launched a widespread phishing campaign exploiting Microsoft's OAuth device code flow to bypass MFA and ...

Nearly every security incident begins with some kind of social engineering or phishing attack. What’s even more worrisome is that phishing volume itself is growing year over year. Adversaries are ...

Proofpoint has warned about phishing campaigns abusing legitimate device authorization flow to bypass MFA and gain persistent ...

Phishing attacks remain a huge challenge for organizations in 2025. In fact, with attackers increasingly leveraging identity-based techniques over software exploits, phishing arguably poses a bigger ...