CrowdStrike Defends Against Azure Cross-Tenant Synchronization Attacks

Azure cross-tenant synchronization (CTS) was made generally available on May 30, 2023, and introduced a new attack surface on Microsoft Entra ID (formerly Azure Active Directory) where attackers can move laterally to a partner tenant or create a backdoor on an existing tenant. CrowdStrike showcases two observed attack paths to outline how adversaries can abuse […]

active directory adversaries attack attackers attack paths attacks attack surface azure azure active directory backdoor can cloud security crowdstrike cts directory entra entra id featured may microsoft microsoft entra microsoft entra id partner synchronization