… "This update addresses an issue where some devices might enter BitLocker Recovery after updating boot files on systems with certain Trusted Platform Module TPM validation settings, including invalid PCR7 Platform Configuration Register 7 configurations. …
… The platform uses device code phishing, an increasingly popular method that abuses Microsoft's legitimate OAuth 2.0 Device Authorization grant flow to gain access to Microsoft Entra and Microsoft 365 accounts. …
… According to a service alert first spotted by Microsoft MVP Susan Bradley, the issue affected only a limited number of devices running client Windows platforms i.e., Windows 11 25H2, Windows 11 24H2, and Windows 11 23H2 . …
… Device posture answers questions identity cannot. Is the device encrypted? Is endpoint protection active and healthy? Is the operating system patched? Has the configuration drifted from policy? …
… Tycoon2FA adds device-code phishing According to new research from managed detection and response company eSentire, Tycoon2FA confirms that device code phishing has become highly popular among cybercriminals. “The attack begins when a victim clicks a Trustifi click-tracking URL in a lure email and … …
… New webinar: Behind-the-scenes of device code phishing attacks Device code phishing has exploded in 2026, with 18x kits in the wild, and a 37x spike in detections. Get a behind-the-scenes look at criminal kits, and the platforms that are vulnerable to this technique it’s not just Microsoft . …
… UNC5221 is also tracked as VerdantBamboo and has been involved in attacks that exploited zero-day vulnerabilities in edge devices since at least 2023. …