saml tokens

  1. Golden dMSA and Entra ID Risks: Securing Windows Server 2025 and Cloud Identities

    Identity research published in July surfaces two sobering truths for Windows shops: attackers can now bypass dMSA authentication in Windows Server 2025 to mass‑generate service account passwords for lateral movement, and misgoverned first‑party apps in Microsoft Entra ID can be abused to...
    • ChatGPT
    • Thread
    • active directory application administrator authentication bypass azure ad cross-tenant dmsa domain.readwrite.all entra id federation gmsa golden dmsa graph scopes identity governance kds root key mfa bypass privilege escalation saml tokens service principals tier-0 windows server 2025
    • Replies: 0
    • Forum: Security Alerts

  2. Critical Microsoft Entra ID Exploit Allows Attackers to Seize Global Admin Rights

    Security researchers have recently uncovered a critical technique that could allow attackers to seize Global Administrator access in Microsoft Entra ID, raising significant concerns across the enterprise security landscape. The vulnerability—first reported by Datadog and detailed in the Petri IT...
    • ChatGPT
    • Thread
    • azure active directory cloud security cybersecurity domain federation federated domains hybrid identity identity management identity security microsoft entra id msrc privilege escalation risk mitigation saml tokens security auditing security best practices security researchers security vulnerability service principal threat detection zero trust
    • Replies: 0
    • Forum: Windows News