active directory
"Insecure out of the box, with misconfigurations and toxic permission combinations" yet absolutely embedded everywhere...
National Security Agency joins with Five Eyes partners to issue urgent guidance on detecting and mitigating techniques that give attackers "the keys to the kingdom".
Hackers proxied the Azure Active Directory (Azure AD) sign-in pages of thousands of organisations to steal credentials and bypass multi-factor authentication (MFA), Microsoft has warned, saying it tracked attempts against 10,000 organisations since September 2021 – many attacks resulting in successful follow-up business email compromise (BEC) campaigns (sophisticated phishing that
"It is best to assume that the credentials may have been compromised..."
