OAuth

Device Code Phishing in 2026: How Attackers Bypass MFA with a Simple URL

Post author:Prabhu Kalyan Samal
Post published:August 22, 2026
Post category:Security

Device code phishing surged 37x in 2026. How attackers exploit OAuth 2.0 device authorization grants to turn victims' own MFA against them — plus detection strategies and defense hardening.

The State of Cybersecurity in May 2026: AI-Powered Attacks, Critical 0-Days, and What Defenders Must Know

Post author:Prabhu Kalyan Samal
Post published:May 25, 2026
Post category:Security

May 2026 is defined by AI-powered attacks (Claude workspace npm stealers, Grandoreiro phishing), an exploited 0-day flood (NGINX CVE-2026-42945, Defender, DirtyDecrypt), the GitHub breach and Megalodon CI/CD poisoning, and OAuth consent phishing that sidesteps MFA. Defense strategies inside.