You can’t hide things in AAD
If there is single sentence I would emphasize regarding all things AAD, then it would be ”You can’t hide thingsLue lisää
Kategoria: Uncategorized
Tips&Tricks- Securing Activesync Access to Exchange Online with 365 MDM
I’ve always felt that Office 365 MDM is obsolete option between doing just Exchange ActiveSync Policies, and going the wholeLue lisää
Demonstration – Illicit consent grant attack in Azure AD / Office 365
Disclaimer: All information contained within this post is common knowledge, given you grasp basic concepts of AAD default behavior, OAuth2 AuthorizationsLue lisää
Testing: Conditional Access: Strong Proof Up for Azure MFA in the cloud
Update 6.May.2019: There is new feature in Conditional Access, which allows creating a different policy for updating security properties,
Easy rundown for ’Your 2FA is mine also’ | CVE-2018-8340 | AD FS Security Feature Bypass Vulnerability
Here is a short rundown of the vulnerability described by MSRC as discovered and described in this detailed Blog by OKTA researcherLue lisää
SecureCloudBlog 