New Microsoft Azure AD CTS feature can be abused for lateral movement

Microsoft's new Azure Active Directory Cross-Tenant Synchronization (CTS) feature, introduced in June 2023, has created a new potential attack surface that might allow threat actors to more easily spread laterally to other Azure tenants. [...]

active directory attack attack surface azure azure active directory azure ad cloud directory feature june june 2023 lateral movement microsoft microsoft azure microsoft azure ad security synchronization threat threat actors