Imho the so far worst cloud vuln ever
#onering #cloudvuln https://infosec.exchange/@rogeragrimes/115253620912735724
Roger A. Grimes (@[email protected])
Thanks to Security researcher Dirk-jan Mollema for finding this HUGE Microsoft Entra ID "god mode" flaw that would have allowed attackers to take over any Microsoft Entra tenant. This is the way secure disclosure is suppose to work...but thanks again to Mollema. https://www.wired.com/story/microsoft-entra-id-vulnerability-digital-catastrophe/