Select Page
You Didn’t Get Phished. You Signed Them In.

You Didn’t Get Phished. You Signed Them In.

EvilTokens compromised more than 12,000 inboxes without stealing a single password. The device code flow did exactly what it was built to do, and that is the whole problem. The Oldest Trick I Know Back when I was on the wrong side of the keyboard, the best social...