Device Code Phishing Up 1,500% in 2026; Vishing Doubles

Device code phishing and vishing are experiencing a dramatic surge, driven by state-sponsored and cybercriminal groups, and are proving highly effective at bypassing traditional security measures. CrowdStrike reports a 15-fold increase in device code phishing and a doubling of vishing attacks between late 2025 and early 2026. These techniques are particularly successful because they exploit human vulnerabilities and avoid detection by email security tools, allowing attackers to gain access to cloud identities and SaaS applications.