Personal website of Holger Rünkaru - cybersecurity professional, speaker, and blogger.https://runkaru.ee/https://runkaru.ee/en/blog/device-code-flow-attack-vector-that-bypasses-mfa/https://runkaru.ee/en/blog/device-code-flow-attack-vector-that-bypasses-mfa/How attackers exploit Microsoft's own legitimate authentication protocol to bypass MFA and gain long-term access to organizational data — and how to protect yourself.Sun, 01 Mar 2026 00:00:00 GMT