Microsoft Disrupts EvilTokens Device Code Phishing Service

Dark Reading feed covering major cybersecurity developments from September 2026, including Microsoft disruption of the EvilTokens device-code phishing service, OAuth and identity abuse, supply-chain compromises, AI-enabled attacks and governance risks, active exploitation of critical Cisco, GitLab, Windows, and Microsoft vulnerabilities, malware-as-a-service, APT espionage, ransomware extortion, and mobile banking malware. The most urgent items involve actively exploited or maximum-severity vulnerabilities and attacks targeting Microsoft 365, enterprise identity, software supply chains, and AI