Security researchers uncovered a critical infrastructure vulnerability that exposed multiple coordinated phishing campaigns exploiting Microsoft 365 users. The attackers leveraged Evilginx, a sophisticated proxy tool, combined with device code authentication abuse to compromise user sessions and steal credentials. This discovery provides valuable insights into evolving threat tactics targeting enterprise environments and highlights the importance of monitoring for exposed attack infrastructure in cybersecurity operations.

Summary auto-generated by AI from the original publisher's content. Editorial standards.