#azuread — Public Fediverse posts

If you're running Microsoft Entra Connect, consider upgrading to v2.6.79.0 soon, it patches undisclosed security vulnerabilities.

https://learn.microsoft.com/en-gb/entra/identity/hybrid/connect/reference-connect-version-history#26790

#EntraID #Entra #AzureAD #patch #vulnerability

If you're running Microsoft Entra Connect, consider upgrading to v2.6.79.0 soon, it patches undisclosed security vulnerabilities.

https://learn.microsoft.com/en-gb/entra/identity/hybrid/connect/reference-connect-version-history#26790

#EntraID #Entra #AzureAD #patch #vulnerability

If you're running Microsoft Entra Connect, consider upgrading to v2.6.79.0 soon, it patches undisclosed security vulnerabilities.

https://learn.microsoft.com/en-gb/entra/identity/hybrid/connect/reference-connect-version-history#26790

#EntraID #Entra #AzureAD #patch #vulnerability

Ebola makes philosophers, outbreak makes heroes, #AzureAD makes sages.

Ebola makes philosophers, outbreak makes heroes, #AzureAD makes sages.

Ebola makes philosophers, outbreak makes heroes, #AzureAD makes sages.

⚠️ CRITICAL: CVE-2026-33843 in Microsoft Entra (Azure AD B2C) enables remote authentication bypass & privilege escalation. Patch released by Microsoft — confirm your cloud environment is updated. Details: https://radar.offseq.com/threat/cve-2026-33843-cwe-288-authentication-bypass-using-57b6f0a6 #OffSeq #AzureAD #Security #CVE202633843

⚠️ CRITICAL: CVE-2026-33843 in Microsoft Entra (Azure AD B2C) enables remote authentication bypass & privilege escalation. Patch released by Microsoft — confirm your cloud environment is updated. Details: https://radar.offseq.com/threat/cve-2026-33843-cwe-288-authentication-bypass-using-57b6f0a6 #OffSeq #AzureAD #Security #CVE202633843

⚠️ CRITICAL: CVE-2026-33843 in Microsoft Entra (Azure AD B2C) enables remote authentication bypass & privilege escalation. Patch released by Microsoft — confirm your cloud environment is updated. Details: https://radar.offseq.com/threat/cve-2026-33843-cwe-288-authentication-bypass-using-57b6f0a6 #OffSeq #AzureAD #Security #CVE202633843

⚠️ CRITICAL: CVE-2026-33843 in Microsoft Entra (Azure AD B2C) enables remote authentication bypass & privilege escalation. Patch released by Microsoft — confirm your cloud environment is updated. Details: https://radar.offseq.com/threat/cve-2026-33843-cwe-288-authentication-bypass-using-57b6f0a6 #OffSeq #AzureAD #Security #CVE202633843

🚨 CRITICAL: CVE-2026-33843 in Microsoft Entra (Azure AD B2C) allows remote auth bypass (CVSS 9.1). Patch released — Microsoft manages remediation. No known exploits. Check advisory & verify your cloud config. https://radar.offseq.com/threat/cve-2026-33843-cwe-288-authentication-bypass-using-57b6f0a6 #OffSeq #AzureAD #CloudSecurity #CVE202633843

🚨 CRITICAL: CVE-2026-33843 in Microsoft Entra (Azure AD B2C) allows remote auth bypass (CVSS 9.1). Patch released — Microsoft manages remediation. No known exploits. Check advisory & verify your cloud config. https://radar.offseq.com/threat/cve-2026-33843-cwe-288-authentication-bypass-using-57b6f0a6 #OffSeq #AzureAD #CloudSecurity #CVE202633843

🚨 CRITICAL: CVE-2026-33843 in Microsoft Entra (Azure AD B2C) allows remote auth bypass (CVSS 9.1). Patch released — Microsoft manages remediation. No known exploits. Check advisory & verify your cloud config. https://radar.offseq.com/threat/cve-2026-33843-cwe-288-authentication-bypass-using-57b6f0a6 #OffSeq #AzureAD #CloudSecurity #CVE202633843

🚨 CRITICAL: CVE-2026-33843 in Microsoft Entra (Azure AD B2C) allows remote auth bypass (CVSS 9.1). Patch released — Microsoft manages remediation. No known exploits. Check advisory & verify your cloud config. https://radar.offseq.com/threat/cve-2026-33843-cwe-288-authentication-bypass-using-57b6f0a6 #OffSeq #AzureAD #CloudSecurity #CVE202633843

🟦 Entra ID Backup. What you Need to Know!

Microsoft has added built in backup and restore to Entra ID — a big win for admins. 🔹
It creates automatic daily backups with five days of retention.
Backups cannot be disabled or deleted even by admins.
Restores cover users groups apps and policies enabling faster recovery and compliance.

💡 Daily backups retained for five days
🔍 Restore users groups apps and policies
⚖️ Backups stored in tenant geo for compliance

Want a short guide to get started?

#EntraID #IdentityBackup #AzureAD #CloudSecurity
▶︎https://www.hubsite365.com/en-ww/pro-office-365/?id=450758d2-b934-f111-88b4-00224882d634&topic=eb4ea787-ac86-ec11-93b0-6045bd8f31a1&theater=true

🟦 Entra ID Backup. What you Need to Know!

Microsoft has added built in backup and restore to Entra ID — a big win for admins. 🔹
It creates automatic daily backups with five days of retention.
Backups cannot be disabled or deleted even by admins.
Restores cover users groups apps and policies enabling faster recovery and compliance.

💡 Daily backups retained for five days
🔍 Restore users groups apps and policies
⚖️ Backups stored in tenant geo for compliance

Want a short guide to get started?

#EntraID #IdentityBackup #AzureAD #CloudSecurity
▶︎https://www.hubsite365.com/en-ww/pro-office-365/?id=450758d2-b934-f111-88b4-00224882d634&topic=eb4ea787-ac86-ec11-93b0-6045bd8f31a1&theater=true

🟦 Entra ID Backup. What you Need to Know!

Microsoft has added built in backup and restore to Entra ID — a big win for admins. 🔹
It creates automatic daily backups with five days of retention.
Backups cannot be disabled or deleted even by admins.
Restores cover users groups apps and policies enabling faster recovery and compliance.

💡 Daily backups retained for five days
🔍 Restore users groups apps and policies
⚖️ Backups stored in tenant geo for compliance

Want a short guide to get started?

#EntraID #IdentityBackup #AzureAD #CloudSecurity
▶︎https://www.hubsite365.com/en-ww/pro-office-365/?id=450758d2-b934-f111-88b4-00224882d634&topic=eb4ea787-ac86-ec11-93b0-6045bd8f31a1&theater=true

----------------

🛠️ Tool
===================

Executive summary:
The Zero Trust Assessment is a Microsoft PowerShell module designed to evaluate tenant configuration against Zero Trust principles and produce a local HTML report. The module performs read-only checks via Microsoft Graph and, optionally, Azure sign-in/audit log verification, and requests administrator consent on the initial connection.

Technical details:
• The module operates by authenticating to Microsoft Graph to enumerate tenant configuration and security-related settings. When available, it also connects to Microsoft Azure to verify export of audit and sign-in logs.
• The assessment is explicitly read-only and stores results locally in an output folder that contains an ZeroTrustAssessmentReport.html file and associated artifacts.
• Initial authentication requires Global Administrator consent to grant a set of Graph permissions. Subsequent assessments can run under Global Reader where applicable.

Permissions observed:

AuditLog.Read.All
CrossTenantInformation.ReadBasic.All
DeviceManagementApps.Read.All
DeviceManagementConfiguration.Read.All
Directory.Read.All
DirectoryRecommendations.Read.All
Policy.Read.All
Policy.Read.ConditionalAccess
Reports.Read.All
RoleManagement.Read.All
UserAuthenticationMethod.Read.All
PrivilegedAccess.Read.AzureAD

How it works (conceptual):
• The module queries tenant objects, policy configuration, device management settings, role and entitlement data, and authentication methods via Graph endpoints.
• If Azure sign-in is provided, additional checks validate whether audit/sign-in logs are being exported and accessible for monitoring and retention checks.

Use cases:
• Internal security reviews to benchmark tenant configuration against Zero Trust recommendations.
• Regular health checks before audits or compliance assessments.
• Pre-engagement diagnostic for third‑party security assessments (with caution about sharing results).

Limitations and considerations:
• The tool requires elevated consent on the first run; organizations must review requested Graph permissions before consenting.
• The assessment may skip Azure‑dependent checks when Azure access is not provided, producing partial results.
• Large tenants can experience runs exceeding 24 hours; the report and export folder contain sensitive tenant metadata and should be handled securely.

References & notes:
• The module name and approach indicate an endpoint‑driven audit using Graph APIs with local result storage. Additions such as custom report paths are supported conceptually.

🔹 tool #ZeroTrust #MicrosoftGraph #AzureAD #tenant_security

🔗 Source: https://learn.microsoft.com/en-us/security/zero-trust/assessment/get-started

RE: https://infosec.exchange/@merill/116188307859736132

Android Authenticator

Root Detection

🚨⚠️🚨⚠️🚨⚠️🚨⚠️

#MicrosoftAuthenticator on #Android
strictly blocks usage on rooted or
jailbroken devices.

Relies on Google
Play Services;

privacy-focused OS
distributions (e.g., #GrapheneOS)
lacking Play Services will be
completely blocked.

THIS WONT MAKE EVERYONE HAPPY

#EntraID #AzureAD

RE: https://infosec.exchange/@merill/116188307859736132

Android Authenticator

Root Detection

🚨⚠️🚨⚠️🚨⚠️🚨⚠️

#MicrosoftAuthenticator on #Android
strictly blocks usage on rooted or
jailbroken devices.

Relies on Google
Play Services;

privacy-focused OS
distributions (e.g., #GrapheneOS)
lacking Play Services will be
completely blocked.

THIS WONT MAKE EVERYONE HAPPY

#EntraID #AzureAD

RE: https://infosec.exchange/@merill/116188307859736132

Android Authenticator

Root Detection

🚨⚠️🚨⚠️🚨⚠️🚨⚠️

#MicrosoftAuthenticator on #Android
strictly blocks usage on rooted or
jailbroken devices.

Relies on Google
Play Services;

privacy-focused OS
distributions (e.g., #GrapheneOS)
lacking Play Services will be
completely blocked.

THIS WONT MAKE EVERYONE HAPPY

#EntraID #AzureAD

RE: https://infosec.exchange/@merill/116188307859736132

Android Authenticator

Root Detection

🚨⚠️🚨⚠️🚨⚠️🚨⚠️

#MicrosoftAuthenticator on #Android
strictly blocks usage on rooted or
jailbroken devices.

Relies on Google
Play Services;

privacy-focused OS
distributions (e.g., #GrapheneOS)
lacking Play Services will be
completely blocked.

THIS WONT MAKE EVERYONE HAPPY

#EntraID #AzureAD

RE: https://infosec.exchange/@merill/116188307859736132

Android Authenticator

Root Detection

🚨⚠️🚨⚠️🚨⚠️🚨⚠️

#MicrosoftAuthenticator on #Android
strictly blocks usage on rooted or
jailbroken devices.

Relies on Google
Play Services;

privacy-focused OS
distributions (e.g., #GrapheneOS)
lacking Play Services will be
completely blocked.

THIS WONT MAKE EVERYONE HAPPY

#EntraID #AzureAD

⚠️ CVE-2026-2628: CRITICAL auth bypass in All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login plugin (≤2.2.5). Attackers can access WP admin accounts with no credentials. Disable plugin or restrict logins until patched! https://radar.offseq.com/threat/cve-2026-2628-cwe-288-authentication-bypass-using--3ce6682b #OffSeq #WordPress #AzureAD

⚠️ CVE-2026-2628: CRITICAL auth bypass in All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login plugin (≤2.2.5). Attackers can access WP admin accounts with no credentials. Disable plugin or restrict logins until patched! https://radar.offseq.com/threat/cve-2026-2628-cwe-288-authentication-bypass-using--3ce6682b #OffSeq #WordPress #AzureAD

⚠️ CVE-2026-2628: CRITICAL auth bypass in All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login plugin (≤2.2.5). Attackers can access WP admin accounts with no credentials. Disable plugin or restrict logins until patched! https://radar.offseq.com/threat/cve-2026-2628-cwe-288-authentication-bypass-using--3ce6682b #OffSeq #WordPress #AzureAD

⚠️ CVE-2026-2628: CRITICAL auth bypass in All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login plugin (≤2.2.5). Attackers can access WP admin accounts with no credentials. Disable plugin or restrict logins until patched! https://radar.offseq.com/threat/cve-2026-2628-cwe-288-authentication-bypass-using--3ce6682b #OffSeq #WordPress #AzureAD

🟦 Entra ID Access Reviews — Beginner's Guide

New walkthrough demystifies Microsoft Entra ID Access Reviews and how they enforce least privilege 🚀

💡 Access review basics and workflow
🔍 Setup steps roles and scopes
⚖️ Automation recommendations and audit trails

▶︎https://www.hubsite365.com/en-ww/pro-office-365/?id=8dfe0c70-d910-f111-8406-7c1e5273f078&topic=eb4ea787-ac86-ec11-93b0-6045bd8f31a1&theater=true

Watch the video for a step by step demo and a preview of upcoming features. Requires Entra ID P2 or Governance licensing for full capabilities. What access review challenge are you tackling next?

#EntraID #IdentityGovernance #ZeroTrust #AzureAD

🟦 Entra ID Access Reviews — Beginner's Guide

New walkthrough demystifies Microsoft Entra ID Access Reviews and how they enforce least privilege 🚀

💡 Access review basics and workflow
🔍 Setup steps roles and scopes
⚖️ Automation recommendations and audit trails

▶︎https://www.hubsite365.com/en-ww/pro-office-365/?id=8dfe0c70-d910-f111-8406-7c1e5273f078&topic=eb4ea787-ac86-ec11-93b0-6045bd8f31a1&theater=true

Watch the video for a step by step demo and a preview of upcoming features. Requires Entra ID P2 or Governance licensing for full capabilities. What access review challenge are you tackling next?

#EntraID #IdentityGovernance #ZeroTrust #AzureAD

🟦 Entra ID Access Reviews — Beginner's Guide

New walkthrough demystifies Microsoft Entra ID Access Reviews and how they enforce least privilege 🚀

💡 Access review basics and workflow
🔍 Setup steps roles and scopes
⚖️ Automation recommendations and audit trails

▶︎https://www.hubsite365.com/en-ww/pro-office-365/?id=8dfe0c70-d910-f111-8406-7c1e5273f078&topic=eb4ea787-ac86-ec11-93b0-6045bd8f31a1&theater=true

Watch the video for a step by step demo and a preview of upcoming features. Requires Entra ID P2 or Governance licensing for full capabilities. What access review challenge are you tackling next?

#EntraID #IdentityGovernance #ZeroTrust #AzureAD

Lock down endpoints. Apply Conditional Access with device compliance checks—don’t trust unmanaged devices. #ZeroTrust #EndpointSecurity #AzureAD

🔧 Keycloak + OpenID (Entra ID) gặp lỗi AADSTS50011: redirect URI không khớp. Cần đồng bộ URI giữa Azure portal và Keycloak: dùng http://localhost:8080/... thay 127.0.0.1 và cập nhật trong “Valid Redirect URIs” của client. Đừng quên chọn “client secret sent in request body” nếu phiên bản cũ không có tùy chọn khác. #Keycloak #OpenID #AzureAD #EntraID #dev #công_nghệ #phát_triển

https://www.reddit.com/r/selfhosted/comments/1qbru4t/how_to_change_redirect_uri_when_using_openid_on/

Today, system and cloud administrators find themselves juggling speed and security. Infrastructure has never been more distributed: workloads run across data centers, cloud providers, containers, and remote endpoints. Managing access, maintaining visibility, and enforcing policies across all these systems is a daily challenge. Here's an introduction to Identity and Access Management (IAM) for administrators across OSs and cloud environments.

#IAM #Windows #AzureAD #Entr
https://negativepid.blog/understanding-iam-across-environments/

Today, system and cloud administrators find themselves juggling speed and security. Infrastructure has never been more distributed: workloads run across data centers, cloud providers, containers, and remote endpoints. Managing access, maintaining visibility, and enforcing policies across all these systems is a daily challenge. Here's an introduction to Identity and Access Management (IAM) for administrators across OSs and cloud environments.

#IAM #Windows #AzureAD #Entr
https://negativepid.blog/understanding-iam-across-environments/

Today, system and cloud administrators find themselves juggling speed and security. Infrastructure has never been more distributed: workloads run across data centers, cloud providers, containers, and remote endpoints. Managing access, maintaining visibility, and enforcing policies across all these systems is a daily challenge. Here's an introduction to Identity and Access Management (IAM) for administrators across OSs and cloud environments.

#IAM #Windows #AzureAD #Entr
https://negativepid.blog/understanding-iam-across-environments/

Today, system and cloud administrators find themselves juggling speed and security. Infrastructure has never been more distributed: workloads run across data centers, cloud providers, containers, and remote endpoints. Managing access, maintaining visibility, and enforcing policies across all these systems is a daily challenge. Here's an introduction to Identity and Access Management (IAM) for administrators across OSs and cloud environments.

#IAM #Windows #AzureAD #Entr
https://negativepid.blog/understanding-iam-across-environments/

🎤 On Stage in 5min 🎤 Track 1: @powers-hell.com Track 2: Jan-Hendrik Peters Track 3: @hcritter.bsky.social Track 4: Jonny Eskew #PowerShell #automation #Azure #DevOps #Microsoft365 #AzureAD #MSAL #MicrosoftGraph #Bicep

🎤 On Stage in 5min 🎤 Track 1: @powers-hell.com Track 2: Jan-Hendrik Peters Track 3: @hcritter.bsky.social Track 4: Jonny Eskew #PowerShell #automation #Azure #DevOps #Microsoft365 #AzureAD #MSAL #MicrosoftGraph #Bicep

🎤 On Stage in 5min 🎤 Track 1: @powers-hell.com Track 2: Jan-Hendrik Peters Track 3: @hcritter.bsky.social Track 4: Jonny Eskew #PowerShell #automation #Azure #DevOps #Microsoft365 #AzureAD #MSAL #MicrosoftGraph #Bicep

🎤 On Stage in 5min 🎤 Track 1: @powers-hell.com Track 2: Jan-Hendrik Peters Track 3: @hcritter.bsky.social Track 4: Jonny Eskew #PowerShell #automation #Azure #DevOps #Microsoft365 #AzureAD #MSAL #MicrosoftGraph #Bicep

📚 Identity & Access Management

Executive summary
Securing Microsoft Entra ID requires treating cloud identity as the primary perimeter. Real-world breaches frequently start with phishing and progress through token theft, abuse of service principals, misconfigured Conditional Access, and poorly governed privileged accounts.

Technical details
• Common initial access vectors include phishing (ATT&CK T1566) and credential stuffing/brute force (ATT&CK T1110).
• Post-compromise techniques observed in cloud-first environments include session/refresh token theft, abuse of valid accounts (ATT&CK T1078), and exploitation of overly permissive service principal roles.
• Hybrid identity pitfalls include stale device registrations, incorrect federation settings, and synchronization gaps that leave legacy credentials usable.

Impact analysis
Compromise of Entra ID often grants access to Microsoft 365, Azure Portal, and connected SaaS, enabling lateral movement entirely within IAM relationships. Attackers can escalate privileges, create persistence via app registrations or service principals, and exfiltrate data without needing on-prem network access.

Detection guidance
• Monitor anomalous sign-in patterns in Azure AD sign-in logs, including unusual locations, impossible travel, and atypical client apps.
• Alert on high-risk token activities such as refresh token reuse, long-lived sessions, and new app registrations with privileged scopes.
• Correlate Conditional Access evaluation failures and overrides with suspicious login behavior.

Mitigation guidance
• Harden Conditional Access policies: block legacy auth, require MFA for administrative roles, apply risk-based controls, and use device-based signals for high-risk access.
• Reduce attack surface for service principals: apply least privilege, require managed identities where possible, and audit app consent grants.
• Secure hybrid identity: validate federation metadata, limit synchronization scope, and retire stale accounts and devices.
• Protect token lifecycles: enforce short-lived access tokens, review refresh token policies, and revoke tokens on suspicious events.

Operational recommendations
Combine preventive controls (Conditional Access, MFA, least privilege) with detective controls (sign-in analytics, risky sign-in alerts, audit trails) and regular privileged access reviews. Prioritize remediation of misconfigurations that enable token theft or bypass MFA.

🔹 EntraID #AzureAD #ConditionalAccess #IAM #IdentitySecurity

🔗 Source: https://blog.nviso.eu/2025/09/25/securing-microsoft-entra-id-lessons-from-the-field-part-1/

Microsoft Entra ID Exposed: Actor Token Flaw Enables Stealthy Global Admin Takeove https://thecyberexpress.com/cve-2025-55241-exposes-entra-id-admin-access/ #AzureActiveDirectory #TheCyberExpressNews #MicrosoftEntraID #Vulnerabilities #TheCyberExpress #FirewallDaily #CVE202555241 #CyberNews #AzureAD

Microsoft Entra ID Exposed: Actor Token Flaw Enables Stealthy Global Admin Takeove https://thecyberexpress.com/cve-2025-55241-exposes-entra-id-admin-access/ #AzureActiveDirectory #TheCyberExpressNews #MicrosoftEntraID #Vulnerabilities #TheCyberExpress #FirewallDaily #CVE202555241 #CyberNews #AzureAD

Microsoft Entra ID Exposed: Actor Token Flaw Enables Stealthy Global Admin Takeove https://thecyberexpress.com/cve-2025-55241-exposes-entra-id-admin-access/ #AzureActiveDirectory #TheCyberExpressNews #MicrosoftEntraID #Vulnerabilities #TheCyberExpress #FirewallDaily #CVE202555241 #CyberNews #AzureAD

Microsoft Entra ID Exposed: Actor Token Flaw Enables Stealthy Global Admin Takeove https://thecyberexpress.com/cve-2025-55241-exposes-entra-id-admin-access/ #AzureActiveDirectory #TheCyberExpressNews #MicrosoftEntraID #Vulnerabilities #TheCyberExpress #FirewallDaily #CVE202555241 #CyberNews #AzureAD

⚠️ Vulnerability Report
=======================

🎯 Threat Intelligence

Executive summary: A combined issue involving undocumented "actor
tokens" used for Microsoft backend S2S authentication and a
tenant‑validation flaw in the legacy Azure AD Graph API allowed
cross‑tenant impersonation of Entra ID users, including Global Admins.
Microsoft released mitigations and CVE‑2025‑55241.

Technical details:
• Undocumented "actor tokens" provide impersonation capability for
service‑to‑service contexts and bypass tenant‑scoped security controls
such as Conditional Access.
• The legacy Azure AD Graph API failed to validate the originating
tenant correctly, enabling requests with actor tokens issued in one
tenant to act against another tenant's directory.
• Requesting these tokens generated no tenant‑level logs in the victim
tenant; Azure AD Graph API lacks comprehensive API‑level telemetry
compared with Microsoft Graph.

Impact analysis:
• Full read/write access to Azure AD Graph API in any affected tenant,
enabling disclosure and modification of users, groups, roles,
applications, service principals, device records and BitLocker keys.
• Potential lateral extension into Microsoft 365 and Azure via
compromised identities granted roles or credentials.
• Limited detectability at the tenant side due to logging design for
actor tokens and the legacy API.

🔹 Attack Chain Analysis

1. Token acquisition — Request actor token from an attacker‑controlled
tenant (actor token issued by backend).
2. Cross‑tenant impersonation — Use the actor token with Azure AD
Graph API endpoints targeting a victim tenant; the API fails to
validate origin.
3. Directory access & privilege abuse — Enumerate/impersonate users;
if Global Admin impersonated, modify directory objects and assign
permissions.
4. Persistence & lateral movement — Create service principals or
credentials to maintain access and pivot to Microsoft 365/Azure.

Detection: Monitor for anomalous use of legacy Azure AD Graph API
where Microsoft Graph would normally be used; validate cross‑tenant
token issuance patterns at organizational boundaries; enable any
available API telemetry and endpoint logging.

Mitigation: Ensure reliance on Microsoft Graph, apply least‑privilege
controls to app registrations, audit service principal assignments,
and apply vendor mitigations issued for CVE‑2025‑55241.

🔹 CVE-2025-55241 #EntraID #AzureAD #actor_tokens #cloudsecurity

🔗 Source: https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/

"While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful #EntraID #vulnerability that I will probably ever find. This vulnerability could have allowed me to compromise every Entra ID tenant in the world (except probably those in national cloud deployments). If you are an Entra ID admin reading this, yes that means complete access to your tenant." 😲

https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/

#Microsoft #security #Cloud #Azure #AD #ActiveDirectory #AzureAD

"While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful #EntraID #vulnerability that I will probably ever find. This vulnerability could have allowed me to compromise every Entra ID tenant in the world (except probably those in national cloud deployments). If you are an Entra ID admin reading this, yes that means complete access to your tenant." 😲

https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/

#Microsoft #security #Cloud #Azure #AD #ActiveDirectory #AzureAD

"While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful #EntraID #vulnerability that I will probably ever find. This vulnerability could have allowed me to compromise every Entra ID tenant in the world (except probably those in national cloud deployments). If you are an Entra ID admin reading this, yes that means complete access to your tenant." 😲

https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/

#Microsoft #security #Cloud #Azure #AD #ActiveDirectory #AzureAD

"While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful #EntraID #vulnerability that I will probably ever find. This vulnerability could have allowed me to compromise every Entra ID tenant in the world (except probably those in national cloud deployments). If you are an Entra ID admin reading this, yes that means complete access to your tenant." 😲

https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/

#Microsoft #security #Cloud #Azure #AD #ActiveDirectory #AzureAD

"While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful #EntraID #vulnerability that I will probably ever find. This vulnerability could have allowed me to compromise every Entra ID tenant in the world (except probably those in national cloud deployments). If you are an Entra ID admin reading this, yes that means complete access to your tenant." 😲

https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/

#Microsoft #security #Cloud #Azure #AD #ActiveDirectory #AzureAD

👋 It's Entra NOT Ontra 😂

Full episode at https://entra.news/p/from-active-directory-to-ai-agents

entra.chat

#entra #microsoft #cybersecurity #azuread

https://youtube.com/shorts/XsWkOuKL9Do?si=uxvmGvUdwxYAhMHi

👋 It's Entra NOT Ontra 😂

Full episode at https://entra.news/p/from-active-directory-to-ai-agents

entra.chat

#entra #microsoft #cybersecurity #azuread

https://youtube.com/shorts/XsWkOuKL9Do?si=uxvmGvUdwxYAhMHi

👋 It's Entra NOT Ontra 😂

Full episode at https://entra.news/p/from-active-directory-to-ai-agents

entra.chat

#entra #microsoft #cybersecurity #azuread

https://youtube.com/shorts/XsWkOuKL9Do?si=uxvmGvUdwxYAhMHi

👋 It's Entra NOT Ontra 😂

Full episode at https://entra.news/p/from-active-directory-to-ai-agents

entra.chat

#entra #microsoft #cybersecurity #azuread

https://youtube.com/shorts/XsWkOuKL9Do?si=uxvmGvUdwxYAhMHi

⚠️ #Microsoft #EntraID #AzureAD #MFA #HugOps ⚠️

⚠️ #Microsoft #EntraID #AzureAD #MFA #HugOps ⚠️

⚠️ #Microsoft #EntraID #AzureAD #MFA #HugOps ⚠️

⚠️ #Microsoft #EntraID #AzureAD #MFA #HugOps ⚠️

https://opensource.microsoft.com/blog/2022/01/18/announcing-azure-active-directory-azure-ad-workload-identity-for-kubernetes/ - authenticate #Kubernetes #pods to #AzureAD (now #Entra). Nice intro Anish Ramasekar.