TrustSink Attack Uses Rogue MFA Provider to Steal Passwords During Legitimate Microsoft Entra Logins
Multi-factor authentication is designed to add another layer of protection between stolen passwords and sensitive accounts. But that protection depends on the integrity of the authentication infrastructure itself. According to Cybersecurity News, a newly demonstrated technique called TrustSink shows what can happen when attackers gain control of a highly privileged Microsoft Entra identity and then
Read More
