Russian Hackers Exploit Microsoft 365 Device Code Authentication Feature
Russian state-sponsored hackers have launched a sophisticated campaign targeting Microsoft 365 accounts by exploiting the device code authentication feature since January 2025. The attack, first identified by Volexity, demonstrates how threat actors are leveraging legitimate authentication methods to bypass security measures and gain unauthorized access to sensitive organizational data. Key Takeaways: Russian hackers from groups […]