🧰 Conditional Access

The items that name it 3

• IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases
  articleas tools2026-10-29It is written here as Conditional Access: used to block legacy authentication.
• M365 Token Spray and Replay Campaign Compromises Business Email Accounts
  writeupas classification.technologies2026-10-22
• We Need to Talk About Device Code Phishing
  articleas tools2026-06-22

  Microsoft Entra ID security feature enforcing access policies based on signals like user, location, device, and risk level; evaluates each sign-in attempt and applies controls; a Microsoft-managed policy blocking device code flow was released in 2025.