Security News OAuth Device Code Phishing: Azure vs. Google Compared BleepingComputer Daniel Bender 03 Nov 2025 Device code phishing abuses the OAuth device flow — Azure can yield very powerful tokens while Google limits scopes, reducing the blast radius. Register for Huntress Labs' Live Hack to see live Microsoft 365 attack demos, explore defensive tactics, and get an Identity Security Assessment.