NEWS
Misconfigured Server Reveals Three Evilginx M365 Phishing Operations
A leaked attack server exposed three Microsoft 365 phishing operations abusing Evilginx and the OAuth device-code flow to defeat MFA at scale.
Jul 13, 2026 5 min read High Severity