News Device Code Phishing: The Microsoft 365 Attack Your Security Stack Doesn’t Block by Rebecca Sutton September 23, 2026 by Rebecca Sutton September 23, 2026 EvilTokens compromised over 12,000 Microsoft 365 inboxes using device code phishing before Microsoft’s Digital Crimes Unit shut it down. Here is how the attack works and a five-point check for … FacebookTwitterLinkedinEmail