Jul 142026 Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365 An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture sessions.