Posts Tagged ‘Microsoft’

  CISA has reported seeing post-compromise threat activity in Microsoft Cloud/Azure environments, identifying three key components of this advanced persistent threat: Compromise / bypassing of federated identity solutions Use of forged authentication tokens to move laterally to Microsoft cloud environments Use of privileged access to a victim’s cloud environment to establish difficult-to-detect persistence mechanisms for…