How are you controlling Microsoft 365 device-code authentication with Conditional Access?
Microsoft's reporting on device-code phishing highlights an awkward security tradeoff: device-code authentication is legitimate, but attackers can abuse it by persuading users to authorize a session on another…