Device Code Authentication From Known Suspicious Hosting Networks

Ankit Mehta@Secvyn

•updated Jun 30, 2026•1•0•2

Identifies device code sign-ins originating from infrastructure previously associated with phishing operations and adversary-controlled relay servers.