Microsoft 365 accounts targeted in wave of OAuth phishing attacks Multiple threat actors are compromising Microsoft that leverage the OAuth device code authorization mechanism.