#authquake — Public Fediverse posts

I bet Microsoft's tolerance of outdated TOTP responses that gave rise to the #authquake vuln is their need to support hardware OATH tokens. Time drift is a real problem and most have no way of correcting it. Still, you'd think that rather than extending the window of acceptable codes and allowing for brute-force guessing, MS would challenge an outdated prompt for the next one and the one after that and then they could figure out how far behind the token is and correct for the drift themselves. If that's not the reason I'd love to know what it was! https://www.oasis.security/resources/blog/oasis-security-research-team-discovers-microsoft-azure-mfa-bypass

Microsoft MFA Bypassed via AuthQuake Attack  – Source: www.securityweek.com https://ciso2ciso.com/microsoft-mfa-bypassed-via-authquake-attack-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Identity&Access #securityweekcom #securityweek #AuthQuake #MFAbypass #Microsoft #MFA

Microsoft MFA Bypassed via AuthQuake Attack  – Source: www.securityweek.com https://ciso2ciso.com/microsoft-mfa-bypassed-via-authquake-attack-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Identity&Access #securityweekcom #securityweek #AuthQuake #MFAbypass #Microsoft #MFA

Microsoft MFA Bypassed via AuthQuake Attack  – Source: www.securityweek.com https://ciso2ciso.com/microsoft-mfa-bypassed-via-authquake-attack-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Identity&Access #securityweekcom #securityweek #AuthQuake #MFAbypass #Microsoft #MFA

Microsoft MFA Bypassed via AuthQuake Attack https://www.securityweek.com/microsoft-mfa-bypassed-via-authquake-attack/ #Identity&Access #AuthQuake #MFAbypass #Microsoft #MFA

Microsoft MFA Bypassed via AuthQuake Attack https://www.securityweek.com/microsoft-mfa-bypassed-via-authquake-attack/ #Identity&Access #AuthQuake #MFAbypass #Microsoft #MFA

Microsoft MFA Bypassed via AuthQuake Attack https://www.securityweek.com/microsoft-mfa-bypassed-via-authquake-attack/ #Identity&Access #AuthQuake #MFAbypass #Microsoft #MFA

Microsoft MFA Bypassed via AuthQuake Attack https://www.securityweek.com/microsoft-mfa-bypassed-via-authquake-attack/ #Identity&Access #AuthQuake #MFAbypass #Microsoft #MFA

Microsoft MFA Bypassed via AuthQuake Attack https://www.securityweek.com/microsoft-mfa-bypassed-via-authquake-attack/ #Identity&Access #AuthQuake #MFAbypass #Microsoft #MFA

Microsoft MFA Bypassed via AuthQuake Attack https://www.securityweek.com/microsoft-mfa-bypassed-via-authquake-attack/ #Identity&Access #AuthQuake #MFAbypass #Microsoft #MFA

Oasis Security Research Team Discovers Microsoft Azure MFA Bypass

#authquake

https://www.oasis.security/resources/blog/oasis-security-research-team-discovers-microsoft-azure-mfa-bypass

AuthQuake Flaw Allowed MFA Bypass Across Azure, Office 365 Accounts – Source:hackread.com https://ciso2ciso.com/authquake-flaw-allowed-mfa-bypass-across-azure-office-365-accounts-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #cybersecurity #Vulnerability #AuthQuake #Microsoft #Office365 #Hackread #security #Azure #MFA #OTP

AuthQuake Flaw Allowed MFA Bypass Across Azure, Office 365 Accounts https://hackread.com/authquake-flaw-mfa-bypass-azure-office-365-accounts/ #Cybersecurity #Vulnerability #Microsoft #AuthQuake #Office365 #Security #Azure #MFA #OTP