OAuth 2.0 device authorization grant

6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026

Device code phishing, an OAuth 2.0 device authorization grant abuse technique, has rapidly scaled from red-team tooling to industrialized threat in under six months due to widespread, unintended adoption of the flow beyond its original input-constrained device use case.