4 ms·
The recent microsoft key compromise was significantly worse than this: https://www.wiz.io/blog/storm-0558-compromised-microsoft-key-enables-authentication-of-co
by psanford 3y ago
The recent microsoft key compromise was significantly worse than this: https://www.wiz.io/blog/storm-0558-compromised-microsoft-key-enables-authentication-of-countless-micr https://www.wiz.io/blog/storm-0558-compromised-microsoft-key...
- tristor 3y agoAnd still has no final resolution to my understanding
- perlgeek 3y agoWhat kind of resolution are you hoping for? Or asked differently, what kind of threads do you still see as open? For me, the biggest bummer was the lacking security culture that let a cert validation component to not properly validate certs, in at least two ways (didn't enforce tier separation; accepted tokens signed by an expired or revoked CA).