3 ms·
Our researchers concluded that the compromised MSA key could have allowed the threat actor to forge access tokens for multiple types of Azure Active Directory a
by jolux 3y ago
Our researchers concluded that the compromised MSA key could have allowed the threat actor to forge access tokens for multiple types of Azure Active Directory applications, including every application that supports personal account authentication, such as SharePoint, Teams, OneDrive, customers’ applications that support the “login with Microsoft” functionality, and multi-tenant applications in certain conditions.
I hope it is just a coincidence that Microsoft recently renamed Azure AD to “Entra ID:” https://devblogs.microsoft.com/identity/aad-rebrand/ https://devblogs.microsoft.com/identity/aad-rebrand/
- switch007 3y agoOh wow I hadn't heard of this! Their naming debacles are an endless source of entertainment lol When I think of a security product, I really want to think about the vendor letting people _in_ instead of keeping bad actors _out_ (entra from entrar = to go in, to come in) /s. In Spanish, it's actually the imperative, so it makes you think of ordering someone to go in lol!