securityUpdatedMicrosoft Device Code Flow DEBULL Abuse: 3 Fixes (2026)How threat actors weaponize DEBULL tooling against Microsoft 365 Device Code Flow. Our sysadmin guide to Conditional Access policies and sign-in triage.Updated October 13, 202610m read