Tag

#Social Engineering

2 articles tagged #Social Engineering.

Device Code Phishing Is Beating MFA. Here's How EvilTokens Does It

Cybersecurity/Identity & Access·Aug 3, 2026·5 min read

Device Code Phishing Is Beating MFA: EvilTokens

EvilTokens abuses OAuth's device code flow, so it needs no fake login page at all. How the attack runs, and the Conditional Access policy that stops it.

CybersecuritySecuritySocial Engineering

Read

P.02

Cybersecurity/Social Engineering·Jul 28, 2026·5 min read

ShinyHunters' Vishing Playbook Against SaaS

Microsoft mapped a year of ShinyHunters activity to three paths into Salesforce, and the most common starts with a phone call. How the OAuth trick works.

CybersecuritySecuritySocial Engineering

Read