access control news
2 stories
MFA Ineffective Against OAuth Consent Abuse Without Governance
A recent report highlights a significant limitation in the effectiveness of multi-factor authentication (MFA) when confronted with OAuth consent abuse. While MFA is widely recognized as a crucial security control, it does not inherently protect against the specific vector of attack that leverages misused or over-privileged OAuth consents. This finding underscores that even with MFA in place,…
Who Has Admin Rights in your Entra ID Directory?, (Wed, Aug 26th)
A recent report on August 26th highlighted the persistent challenge organizations face in effectively managing administrative privileges within Microsoft Entra ID, previously known as Azure Active Directory. The core issue revolves around the prevalence of excessive administrative accounts and the assignment of overly broad permissions, which significantly elevate an organization's security…