- Популярные видео
- Авто
- Видео-блоги
- ДТП, аварии
- Для маленьких
- Еда, напитки
- Животные
- Закон и право
- Знаменитости
- Игры
- Искусство
- Комедии
- Красота, мода
- Кулинария, рецепты
- Люди
- Мото
- Музыка
- Мультфильмы
- Наука, технологии
- Новости
- Образование
- Политика
- Праздники
- Приколы
- Природа
- Происшествия
- Путешествия
- Развлечения
- Ржач
- Семья
- Сериалы
- Спорт
- Стиль жизни
- ТВ передачи
- Танцы
- Технологии
- Товары
- Ужасы
- Фильмы
- Шоу-бизнес
- Юмор
Why Your Microsoft 365 MFA Might Be Failing
Think your identity stack is unshakeable just because you have multi-factor authentication (MFA) turned on? Think again. 💀
A massive automated password spray campaign targeting Microsoft 365 environments via the Azure CLI recently exploited misconfigured Conditional Access Policies. By abusing deprecated authentication pathways like the OAuth ROPC flow, attackers managed to bypass interactive MFA prompts entirely for improperly scoped accounts.
Password spraying isn't just about massive volume; it's a strategic test to find the cracks in a fragile identity setup. If your MFA policies don't unconditionally cover "All Cloud Apps" and "All Client App types," your organization could be wide open.
Видео Why Your Microsoft 365 MFA Might Be Failing канала CyberSecMeme
A massive automated password spray campaign targeting Microsoft 365 environments via the Azure CLI recently exploited misconfigured Conditional Access Policies. By abusing deprecated authentication pathways like the OAuth ROPC flow, attackers managed to bypass interactive MFA prompts entirely for improperly scoped accounts.
Password spraying isn't just about massive volume; it's a strategic test to find the cracks in a fragile identity setup. If your MFA policies don't unconditionally cover "All Cloud Apps" and "All Client App types," your organization could be wide open.
Видео Why Your Microsoft 365 MFA Might Be Failing канала CyberSecMeme
Комментарии отсутствуют
Информация о видео
9 июля 2026 г. 17:44:20
00:00:30
Другие видео канала
When the SOC queue needs premium triage... 💀 #shorts
Too many security tools and still missing the signal
Too Many Security Tools = More Risk, Not Less
Stay audit-ready without chasing evidence every week
They called it low priority… until it wasn't
When every security tool screams at once and none agree
"we’ll fix it next sprint" vs CI/CD reality
Medtronic Data Breach Impacts 3.8 Million People #shorts
That audit notice panic when your evidence is scattered everywhere
When your security stack breaks again and you're not even surprised
Surviving a 24/7 Red Team Exercise (Small Team Reality) 💀 #shorts
POV: your vuln backlog stops multiplying overnight
When You Actually Have All The Audit Evidence Ready 😂
POV: Vuln fixes went from weeks to hours
3 Hours In → 200 Critical Vulns Waiting
AI in Security Isn't the Problem… It's the Lack of Control
When your security tools go silent all at once
SOC Analysts when the alert queue never ends... 💀 #shorts
Hackers Are Hiding Malware Inside Regular Images #shorts #steganography #cyberthreats
This vuln backlog refuses to die and i'm still doing it manually
Audit week really turns everything into paperwork huh
