“Modern attackers are using ai to drive undetectable attacks!” Modern attacker, “nah this works fine”

It’s a small thing but Alaska Air no longer has any scotch, because tariffs.

Looking briefly at this work

dirkjanm.io

One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens

While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful Entra ID vulnerability that I will probably eve...

do I understand right that a root cause is that Microsoft rolled out Azure with symmetric authN and each machine has, not the public key associated with the actor token, but a reusable symmetric key?