<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>ITDR on Chris Brumm's Blog</title><link>https://chris-brumm.com/categories/itdr/</link><description>Recent content in ITDR on Chris Brumm's Blog</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sat, 24 Oct 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://chris-brumm.com/categories/itdr/index.xml" rel="self" type="application/rss+xml"/><item><title>Device Code Phishing: Prevention, Detection and Response</title><link>https://chris-brumm.com/2026/10/Device-Code-Phishing/</link><pubDate>Sat, 24 Oct 2026 00:00:00 +0000</pubDate><guid>https://chris-brumm.com/2026/10/Device-Code-Phishing/</guid><description>The trigger for this post is the session &amp;ldquo;The 2026 state of advanced identity attacks&amp;rdquo; that I presented together with Eric Woodruff at the Workplace Ninja Summit 2026 in September. The idea behind it: whenever one of these attacks makes the news, the same questions come up (are we vulnerable? has Microsoft fixed this? how likely is it really?), and a few weeks later they are forgotten because day-to-day business continues.</description></item></channel></rss>