Azure

#Azure

2 articles

Techniques

Device Code Phishing: Skipping the Password, Registering the Device

An MFA bypass with no fake login page: the victim completes a real Microsoft sign-in, and the attacker walks away with a live session. Abusing the Authentication Broker client can turn that session into a registered device and a Primary Refresh Token.

Azure Entra ID Microsoft 365 Phishing+3

4 Sept 20268 min read

Misconfigurations

Top 10 Cloud Misconfigurations That Lead to Data Breaches

Most cloud breaches aren't zero-day exploits, they're misconfigurations. We break down the 10 most common cloud security mistakes with MITRE ATT&CK references and remediation guidance.

Cloud Security AWS Azure Misconfiguration+2

14 Apr 20266 min read