Tag: authorization layer attacks

Device Code Phishing Threat Explodes as OAuth Attacks Bypass MFA

In just four weeks, Barracuda detected a staggering 7 million device-code phishing attacks, revealing a rapidly escalating threat that's bypassing traditional security measures. This sneaky technique exploits the OAuth 2.0 device authorization grant to steal access tokens, outsmarting even multi-factor authentication.