At Black Hat USA 2024, UnOAuthorized revealed an undocumented Microsoft authorization model that permitted unexpected actions in Entra ID (formerly Azure AD). This included a pathway for privilege escalation from lower roles up to the Global Administrator—essentially, the Domain Admin of the cloud.
However, some findings had to be left undisclosed until now.
Join us as we explore the full scope of UnOAuthorized. We will briefly recap the original vulnerability and its resolution and then unveil the remaining findings we can discuss. We'll cover the impact of these findings, how they differ from others, and explain why it took so long to disclose this information.
Don't miss out on the opportunity to secure your spot today for this exciting webinar, proudly sponsored by Zoho! Unlock valuable insights that could transform your perspective. Reserve your place now!
|
