

Adnan #InTheCloud
34.4K posts

@Microspecialist
Microsoft MVP, Trainer, Strategy, Cloud Infrastructure Architects, Speaker, WorldCitizen, WPNinjasNL, 🇿🇦, ❤️ Azure, EMS, Windows, Foody😋M365 #MSFTAdvocate




















Threat actors are increasingly using device code phishing attacks to capture authentication tokens and gain persistent access to accounts as long as the tokens remain valid. msft.it/6012vVnRq EvilTokens, a phishing-as-a-service (PhaaS) platform that automates device code phishing, is enabling threat actors to launch these attacks at scale. In the latest Microsoft Threat Intelligence episode, Sherrod DeGrippo and @HuntressLabs's Lindsay O’Donnell-Welch and Jamie Levy discuss how threat actors use EvilTokens to leverage legitimate authentication flows, trusted infrastructure, and AI-generated lures to launch stealthy phishing attacks. They discuss this evolution in phishing attacks and how defenders can strengthen identity security.




Introducing the #MicrosoftBuild CLI. A GitHub Copilot CLI skill that brings the Build session catalog to your terminal. Browse sessions by topic, language, or speaker, get recommendations based on your project dependencies, and scaffold working code from what you learn.







