Our favorite cloud hacker shows how to escape from AWS exam environments.
There might be at least two exams out there where this still works.
This quoted post is unavailable.
One of our members @pfiatde showed an interesting attack chain today.
The rebranding of Microsoft's Azure AD to Entra ID was used as an phishing vector for full Azure account takeover.
The interesting bit was the entry vector though - it started with a MS Teams message. 👏🔥
Microsofts rebranding of Azure AD to Entra ID allows attackers to craft a nice fullchain attack.
There were a lot good phishing domains not claimed, seems like Microsoft did not care about this.
Made a PoC for @cyvisory. Details below:🧵👇
Today we launch.
The last weeks have been exciting, a dream is finally coming together for our team.
We are excited to officially launch
Hello World - We are Cyvisory
We are Cybersecurity Professionals
We are offensive security Specialists
visit: cyvisory.group
Do you want to understand Email Security better? 🤔
We published a blog post that can help you with exactly that. 💡
cyvisory.hashnode.dev/how-to…
#security #hacking #cyber