Cybersecurity & Data Protection
3
UPVOTE
thehackernews.com

DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts

A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take control of victim accounts between the last week of June 2026 and into early July, per findings from ZeroBEC. "The campaign did not depend on a fake Microsoft password page. It used a malicious collaboration-style lure to push users into the legitimate Microsoft device login experience,
DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts
TN

The Hacker News

13h ago
3 0

Discussion

Leave the first comment

Be the first to leave a mark on this discussion.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

noor_bakker425

Noor Bakker

Noor BakkerUpvoted 8h ago0 comments · 7 shares
JO

jordan af

jordan afUpvoted 11h ago0 comments · 62 shares
RY

ryan maybe

ryan maybeUpvoted 12h ago0 comments · 32 shares

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

thehackernews.com
RedWing MaaS Packages Android Bank Fraud as a Telegram Rental S…

A new Android malware operation called RedWing is being rented out on Telegram as a ready-made bank-fraud service. It lets even low-skill criminals take over a…
RM

ryan maybe

8h ago
0
bleepingcomputer.com
Spain arrests suspected member of pro-Russian hacktivist groups

The National Police in Spain have arrested a man who is suspected of being an active member of the CyberArmy of Russia Reborn (CARR) and Z-Pentest, both pro-Ru…
EK

Emma Klein

12h ago
0
thehackernews.com
Suspected China-Aligned Hackers Exploit Roundcube Flaws Against…

A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U…
TN

The Hacker News

15h ago
0
schneier.com
Google Is Suing Chinese Scammers Who Are Using Gemini

Not sure this will have any effect, but I support the effort: According to Google’s legal filing, Outsider Enterprise operates through Telegram. The grou…
SS

Schneier on Security

16h ago
0
darkreading.com
'BusySnake' Infostealer Slithers into Critical Infrastructure N…

A threat group researchers call "Armored Likho" has gained access to government agencies and electrical power entities in Russia, Brazil, and Kazakhs…
DR

Dark Reading

22h ago
0
bleepingcomputer.com
Phishing poses as big-brand job interview to steal Google accou…

A phishing campaign is impersonating more than 30 well-known brands, including Adobe, Netflix, Coca-Cola, and OpenAI, in fake job interviews to steal Google ac…
SA

SariMartinez

1d ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
RedWing MaaS Packages Android Bank Fraud as a Telegram Rental S…

A new Android malware operation called RedWing is being rented out on Telegram as a ready-made bank-fraud service. It lets even low-skill criminals take over a…
RM

ryan maybe

8h ago
0
thehackernews.com
Suspected China-Aligned Hackers Exploit Roundcube Flaws Against…

A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U…
TN

The Hacker News

15h ago
0
thehackernews.com
Iran-Linked Hackers Use New Cavern C2 Framework to Target Israe…

An Iranian hacking group affiliated with Iran's Ministry of Intelligence and Security (MOIS) has been wielding a previously undocumented modular command-and-co…
TN

The Hacker News

1d ago
0
thehackernews.com
New TrojPix Attack Leaks Data From Air-Gapped Systems via Video…

Researchers at Shandong University have shown a fast new way to pull data off computers that are cut off from every network. The technique, called&nb…
TN

The Hacker News

1d ago
0
thehackernews.com
Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Da…

Researchers found a flaw in Opera GX, the gaming-focused version of the Opera browser, that let a malicious website silently install a browser add-on and…
TN

The Hacker News

1d ago
0
thehackernews.com
U.S. Government Entity Paid Kairos $1 Million in Data-Theft Ext…

A U. S. government entity paid about $1 million to keep stolen files from being leaked, according to a new case study by Rakesh Krishnan for Ransom-ISAC,…
Golden Greta

Golden Greta

3d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest