5 ms·
This is affecting setups that are using a device-code-only flow that Microsoft recommend against. > Only allow device code flow where necessary. Microsoft reco
by gilgoomesh 2y ago
This is affecting setups that are using a device-code-only flow that Microsoft recommend against.
> Only allow device code flow where necessary. Microsoft recommends blocking device code flow wherever possible. Where necessary, configure Microsoft Entra ID’s device code flow in your Conditional Access policies.
https://www.microsoft.com/en-us/security/blog/2025/02/13/storm-2372-conducts-device-code-phishing-campaign/ https://www.microsoft.com/en-us/security/blog/2025/02/13/sto...