8.13 - A Goblin, a Ghost, and a Ninja Walk into the Azure Bar
About this episode
The episode discusses Azure bypass techniques with guest NyxGeek and the implications for authentication logs.
On this episode of Security Noise, Geoff and Skyler are joined by NyxGeek to discuss his suite of Azure bypass techniques that focus on user enumeration (which sometimes border on absurd). Since these techniques leave no trace, what does it mean to the organizations trusting authentication logs? We also discuss Microsoft's response to his findings and Geoff's suspicion that he may be responsible for a couple of table flips over at the MS HQ. Read NyxGeek's latest blog here: https://trustedsec.com/blog/full-disclosure-a-third-and-fourth-azure-sign-in-log-bypass-found About this podcast: Security Noise, a TrustedSec Podcast hosted by Geoff Walton and Producer/Contributor Skyler Tuter, features our cybersecurity experts in conversation about the infosec topics that interest them the most. Find more cybersecurity resources on our website at https://trustedsec.com/resources .
Topics covered
- Azure
- user enumeration
- authentication logs
- cybersecurity
Keywords
- bypass techniques
- Microsoft response
- infosec
More episodes of Security Noise
- 8.14 - The Game Is Over? Gamification of Infosec
- 8.12 - AI is Exploring The Deep Blue CVEs
- 8.11 - IR Evolve
- 8.10 - Ten Years: A Decade of Doing This
- 8.9 - LLM = Love Language Model?!
- 8.8 - Navigating Authorization with a Copilot
Explore listener stats, chart rankings, contacts and more on the Security Noise podcast page.