Device code phishing attacks that abuse the OAuth 2.0 Device Authorization Grant flow to hijack accounts have surged more than 37 times this year.
I spent the last week of March 2026 in San Francisco talking to CTOs, CPOs, and engineering leaders from companies of every ...