Guest users with certain billing roles can create and own subscriptions, potentially gaining persistence and privilege escalation within an organization’s Azure environment. Threat actors can abuse ...

Microsoft added a couple of new Azure Active Directory capabilities this week, including a new control capability that's available commercially. Organizations using Azure Active Directory can now ...

A new proof of concept shows that attackers can use Azure AD CTS to leap to Microsoft and non-Microsoft application across tenants. Lateral movement techniques have been a critical component of ...

Microsoft on Thursday announced the "general availability" commercial release of its cross-tenant access settings for external collaborations feature, which is part of its Azure Active Directory ...