Proofpoint has warned about phishing campaigns abusing legitimate device authorization flow to bypass MFA and gain persistent access.
Hackers thought to be aligned with China and Russia are suspected to be behind a wave of account takeover attacks targeting Microsoft 365 users.