Device Code Phishing: Why Even Passkeys Won't Save Your Microsoft Tenant
A phishing wave against Microsoft 365 bypasses MFA and even phishing-resistant passkeys without faking a single pixel of Microsoft. What attackers do, why it works, and the conditional access policy that stops it.