8.13 - A Goblin, a Ghost, and a Ninja Walk into the Azure Bar

About this episode

The episode discusses Azure bypass techniques with guest NyxGeek and the implications for authentication logs.

On this episode of Security Noise, Geoff and Skyler are joined by NyxGeek to discuss his suite of Azure bypass techniques that focus on user enumeration (which sometimes border on absurd). Since these techniques leave no trace, what does it mean to the organizations trusting authentication logs? We also discuss Microsoft's response to his findings and Geoff's suspicion that he may be responsible for a couple of table flips over at the MS HQ. Read NyxGeek's latest blog here: https://trustedsec.com/blog/full-disclosure-a-third-and-fourth-azure-sign-in-log-bypass-found About this podcast: Security Noise, a TrustedSec Podcast hosted by Geoff Walton and Producer/Contributor Skyler Tuter, features our cybersecurity experts in conversation about the infosec topics that interest them the most. Find more cybersecurity resources on our website at https://trustedsec.com/resources .

People in this episode

Hosts: Geoff Walton, Skyler Tuter

Guest: Nyxgeek

Topics covered

• Azure
• user enumeration
• authentication logs
• cybersecurity

Keywords

• bypass techniques
• Microsoft response
• infosec

Mentioned in this episode

Products: Azure

Books & works: Security Noise

More episodes of Security Noise

• 8.15 - All is Not Quiet on the Detection Front · May 4, 2026 · 58 min
• 8.14 - The Game Is Over? Gamification of Infosec · April 23, 2026 · 44 min
• 8.12 - AI is Exploring The Deep Blue CVEs · March 24, 2026 · 38 min
• 8.11 - IR Evolve · March 9, 2026 · 42 min
• 8.10 - Ten Years: A Decade of Doing This · February 23, 2026 · 40 min
• 8.9 - LLM = Love Language Model?! · February 9, 2026 · 36 min