Report: Vishing and Device Code Phishing Are Surging
KnowBe4, Friday, August 21st, 2026
A CrowdStrike report shows vishing doubling and device code phishing rising 15-fold as attackers exploit phone and OAuth flows.
KnowBe4 covers a new CrowdStrike report showing social engineering remains central to modern cyberattacks. The report records a twofold spike in voice phishing and a fifteenfold increase in device code phishing attacks.
Attackers increasingly turn to vishing because it bypasses traditional security controls and leaves little forensic evidence behind.
Device code phishing exploits OAuth authorization workflows, turning a legitimate sign-in mechanism into an account takeover path. The post draws out what defenders should watch for in both techniques.