Storm 2372
The latest Storm 2372 coverage — news, analysis, and updates from the WindowsNews.AI desk.
Storm-2372 Weaponizes Device Code Phishing to Bypass MFA and Target Critical Infrastructure
In the shadowy corridors of cyber warfare, a sophisticated threat actor known as Storm-2372 has weaponized a seemingly benign authentication protocol to bypass even the most robust multi-factor...
Storm-2372 Exploits Microsoft 365 Device Code Flow to Bypass MFA
The digital landscape for Microsoft 365 users has grown more treacherous with the emergence of Storm-2372, a sophisticated threat actor deploying a cunning phishing technique that exploits the very...
Russian Hackers Exploit Microsoft OAuth in Storm-2372 Phishing Campaign
Russian state-sponsored hackers have unleashed a sophisticated phishing campaign exploiting a legitimate Microsoft authentication feature, marking a dangerous evolution in cloud account hijacking...
Storm-2372 Phishing Campaign Exploits Microsoft 365 Device Code Flow
The digital shadows lengthen as cybersecurity professionals sound the alarm: a sophisticated phishing campaign dubbed "Storm-2372" is actively exploiting Microsoft 365's authentication protocols,...
Storm-2372 device-code phishing bypasses MFA in Microsoft Teams attacks
Microsoft Teams has become the latest target in a sophisticated phishing campaign dubbed Storm-2372, putting millions of users at risk. Cybersecurity researchers have uncovered a new device code...
Storm-2372 Phishing Bypasses MFA: Device Code Attack Exposes Windows Users
The Storm-2372 phishing campaign has emerged as a sophisticated threat targeting Windows users, exploiting Device Code Authentication vulnerabilities to bypass multi-factor authentication (MFA). This...
Device Code Phishing: How Russian Spies Exploit Microsoft 365 via OAuth Protocols
Russian state-sponsored hackers have developed a sophisticated new phishing technique that bypasses traditional security measures by exploiting Microsoft 365's device code authentication flow. Known...
Microsoft 365 Device Code Phishing: How Storm-2372 Exploits Authentication
In a sophisticated evolution of cyber threats, security researchers have uncovered a spear-phishing campaign that weaponizes Microsoft's legitimate device code authentication process to compromise...