Security News Microsoft 365 accounts targeted in wave of OAuth phishing attacks BleepingComputer Daniel Bender 19 Dec 2025 Multiple threat actors are compromising Microsoft 365 accounts in phishing attacks that leverage the OAuth device code authorization mechanism.