securityBACKGROUND
DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts
BACKGROUND
1 SIGNALFIRST DETECTED 7 July 2026
Narrative synthesis pending — 1 signal collected.
How the story developed
7 Jul
DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts
REPORT · WHAT · The Hacker News
Other feeds and industry voices
17 May
Tycoon2FA hijacks Microsoft 365 accounts via device-code phishing
The Tycoon2FA phishing kit now supports device-code phishing attacks and abuses Trustifi click-tracking URLs to hijack Microsoft 365 accounts. [...]
REPORT · HOW · BleepingComputerOPEN STORY
8 Jul
Entra passkey enrollment vishing targets Microsoft 365 users
A threat actor has been targeting organizations across multiple sectors with voice-based fake security requests that ask Microsoft 365 users to enroll a new Entra passkey. [...]
REPORT · WHAT · BleepingComputerOPEN STORY
5 May
Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 Countries
Microsoft has disclosed details of a large-scale credential theft campaign that has leveraged a combination of code of conduct-themed lures and legitimate email services to direct
REPORT · WHAT · The Hacker NewsOPEN STORY
Sources
The Hacker News
NewsHive monitors these sources continuously. All signal titles above link to the original reporting.
Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →