June 23, 2023, 10:30 p.m. |

Malwarebytes Labs blog.malwarebytes.com

Categories: Exploits and vulnerabilities

Categories: News

Tags: OAuth


Tags: nOAuth


Tags: IdP


Tags: Azure


Tags: Microsoft


Tags: login with


Researchers have found a flaw in Microsoft Azure AD which they claim can be used to take over accounts that rely on pre-established trust.



(Read more...)



The post Microsoft Azure AD flaw can lead to account takeover appeared first on Malwarebytes Labs.

account accounts account takeover azure azure ad claim exploits exploits and vulnerabilities flaw idp login login with microsoft microsoft azure microsoft azure ad noauth oauth researchers takeover trust

Information Security Engineers

@ D. E. Shaw Research | New York City

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA

Penetration Tester, Retail Engineering, Early Career

@ Apple | Austin, Texas, United States

Principal Product Security Engineer

@ Palo Alto Networks | Bengaluru, India

Senior Manager/ Director, Cyber

@ McGrathNicol | Brisbane