Python, Prompt Engineering, Data Science — Build the Skills Employers Want Now
Get 20% off all career paths from fullstack to AI
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore the vulnerabilities and potential exploits in Azure Active Directory (Azure AD) through this 38-minute Black Hat conference talk. Delve into the hidden complexities of Microsoft's Evolved Security Service (eSTS) and its impact on Azure AD security. Learn about the high adoption rate of Azure AD among Fortune 500 companies and why it has become a prime target for threat actors, including state-sponsored groups like APT29/Nobelium. Discover techniques for bypassing Multi-Factor Authentication (MFA) and methods for identifying global administrators within Azure AD environments. Gain valuable insights from security experts Sravan Akkaram and Nestori Syynimaa (DrAzureAD) as they uncover the potential risks and vulnerabilities in this widely-used Identity and Access Management solution.
Syllabus
Abusing Azure Active Directory: From MFA Bypass to Listing Global Administrators
Taught by
Black Hat