Pass the PMP® Exam on Your First Try — Expert-Led Training
NY State-Licensed Certificates in Design, Coding & AI — Online
Overview
Google, IBM & Meta Certificates – 40% Off
One plan covers every Professional Certificate on Coursera.
Unlock All Certificates
This Black Hat conference talk reveals a novel privilege escalation technique that allows attackers to gain Global Administrator access in Microsoft 365 and Azure environments - the cloud equivalent of Domain Administrator privileges. Explore the research background and foundational components that enable this security vulnerability, following a detailed step-by-step walkthrough of how attackers can bypass well-defined role-based access controls and application consent models to achieve the highest level of cloud privileges. Senior Cloud Security Architect Eric Woodruff from Semperis demonstrates this critical security finding that should concern any organization using Microsoft's cloud services, as it represents a significant threat vector that could lead to complete environment compromise.
Syllabus
UnOAuthorized: A Technique to Privilege Escalation to Global Administrator
Taught by
Black Hat