Identity research published in July surfaces two sobering truths for Windows shops: attackers can now bypass dMSA authentication in Windows Server 2025 to mass‑generate service account passwords for lateral movement, and misgoverned first‑party apps in Microsoft Entra ID can be abused to...
active directory
administrator
azure ad
dmsa
domain.readwrite.all
entra id
federation
gmsa
golden dmsa
graph scopes
identity governance
kds root key
mfa bypass
multi-tenant
privilege escalation
samltokens
security bypass
service principal
tier-0
windows server 2025
Security researchers have recently uncovered a critical technique that could allow attackers to seize Global Administrator access in Microsoft Entra ID, raising significant concerns across the enterprise security landscape. The vulnerability—first reported by Datadog and detailed in the Petri IT...