OAuth redirection is being repurposed as a phishing delivery path. Trusted authentication flows are weaponized to move users from legitimate sign‑in pages to attacker‑controlled infrastructure.

Unwitting employees register a hacker’s device to their account; the crook then uses the resulting OAuth tokens to maintain persistent access.

Threat actors are targeting technology, manufacturing, and financial organizations in campaigns that combine device code phishing and voice phishing (vishing) to abuse the OAuth 2.0 Device ...

Locked out? Learn what an SSO code actually is, where to find your company domain, and how to solve common login errors in Zoom, Slack, and Salesforce.

U.S. legacy automaker General Motors GM has been generating strong free cash flow. In recent years, the company has become more focused on returning that cash to shareholders. Buybacks and dividends ...

Threat actors have been observed uploading a set of eight packages on the npm registry that masqueraded as integrations targeting the n8n workflow automation platform to steal developers' OAuth ...

Flow Launcher is a Start menu replacement for your Windows PC that lets you perform various system tasks more efficiently. You can think of it as a Spotlight Search for Windows, but with improved ...

Swedish neurotech startup Flow Neuroscience has secured FDA approval for the first brain stimulation device for home use in treating depression, a regulatory milestone that could reshape a mental ...

Attackers trick users into approving access on real Microsoft pages OAuth device code phishing surged sharply since September 2025 Both cybercriminals and state-linked actors reportedly use this ...

Cybercriminals are launching a widespread wave of phishing attacks that bypass Multi-Factor Authentication (MFA) by exploiting a standard Microsoft 365 feature. Security researchers at Proofpoint warn ...

A suspected Russia-aligned group has been attributed to a phishing campaign that employs device code authentication workflows to steal victims' Microsoft 365 credentials and conduct account takeover ...