5 ms·
This pattern is the rule rather than the exception across MS ecosystems, but to see Microsoft itself do it is particularly egg-on-face. MS security has put sig
by wepple 3y ago
This pattern is the rule rather than the exception across MS ecosystems, but to see Microsoft itself do it is particularly egg-on-face.
MS security has put significant effort into tooling and best practice documentation to try and prevent these types of major screw-ups
- ics 3y agoYeah this shit happens all over the place. I’ve worked for/with numerous people whose method of testing almost always involves giving maximum latitude for idk… shotgun debugging? The bigger problem is that people just forget, they’ve made five test accounts with admin privileges and it isn’t known until (hopefully) someone does an audit of user privileges across the entire company.
- kerng 3y agoYeah, wondering how the initial test account got compromised. Probably no MFA and password spray via OAuth ROPC flow, then lateral movement. M365 is quite bad at enforcing MFA, it's pay to play.