Defending the Authentication Flow: Device Code Phishing with Selena Larson

This podcast episode describes how adversaries exploit Microsoft OAuth/device-code authentication workflows in device-code phishing campaigns, highlights the impact of leaked criminal kits (late 2025) that have commercialized these techniques, analyzes attacker behaviors including BEC, credential harvesting and account takeover jumping, and provides prescriptive defenses such as conditional access policies and strict device compliance to block unauthorized authentication.