leadership1 publisher
Click-time code generation strips the 15-minute limit out of device code phishing
Microsoft's researchers describe a device code phishing campaign that minted fresh codes the moment a target clicked, defeating the expiry that used to hold these attacks down. The flow it abuses is only needed by hardware that cannot show a login page.
Publishers:microsoft.com
Reality
- Evidence55
- Adoption45
- Hype gap+20
- Incentives65
- Confidence60