22/10/2026
Ever heard of device code phishing?
Most businesses haven’t - until it happens.
We recently helped a client recover from a Microsoft 365 account takeover that got past their MFA.
The attacker didn’t crack the password or steal an MFA code. They used Microsoft’s legitimate sign-in process to gain access.
We’ve broken down what happened, how we shut it down, and the extra security layer that could have stopped it: Conditional Access.
👉 Read the full story: https://maceit.co.nz/blog-microsoft-365-account-takeover-conditional-access/
Not sure if your business is protected? Book a free IT review: https://maceit.co.nz/contact-us-new/