BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Allsikt//Article Deadline//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
BEGIN:VEVENT
UID:2dcf908532451d3807da3cbf64b2d403a64393ac@allsikt.tech
DTSTAMP:20260721T113244Z
DTSTART;VALUE=DATE:20260721
DTEND;VALUE=DATE:20260722
SUMMARY:Phishing‑as‑a‑Service Platforms Hijack Hundreds of Microsoft 365 Accounts
DESCRIPTION:Patch: Disable OAuth device‑code flow on Microsoft 365 accounts and enforce Continuous Access Evaluation to mitigate Tycoon2FA device‑code phishing.\n\nSource: Bleeping Computer\nOpen: https://allsikt.se/article/tycoon2fa-hijacks-microsoft-365-accounts-via-device-code-phishing-b39ebfb6
URL:https://allsikt.se/article/tycoon2fa-hijacks-microsoft-365-accounts-via-device-code-phishing-b39ebfb6
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
END:VCALENDAR