OAuth Device Code Phishing: Azure vs. Google Compared

Published on November 3, 2025

Device code phishing abuses the OAuth device flow, and Google and Azure produce strikingly different attack surfaces. Register for Huntress Labs' Live Hack to learn about attack techniques, defensive tactics, and get an Identity Security Assessment. [...]

Continue reading on website
Other news

Cybercriminals Exploit Remote Monitoring Tools to Infiltrate Logistics and Freight Networks

November 3, 2025
Bad actors are increasingly training their sights on trucking and logistics companies with an aim to infect them with remote monitoring and management (RMM) software for financial gain and ultimately steal cargo freight.The threat cluster, believed to be active since at least June 2025 according to Proofpoint, is said to be collaborating with organized crime groups to break into entities in the

Microsoft: Patch for WSUS flaw disabled Windows Server hotpatching

November 3, 2025
An out-of-band (OOB) security update that patches an actively exploited Windows Server Update Service (WSUS) vulnerability has broken hotpatching on some Windows Server 2025 devices. [...]