24 - Microsoft Graph scopes giving attackers high hopes

Update: 2024-02-15

Description

In this episode we talk about the Midnight Blizzard attack on Microsoft, which turns into a rather detailed discussion on Microsoft Graph scopes and their wide permissions. Also, how many Copilot products does Microsoft have now? And how hyper-scale is Azure really?

Comments

In Channel

30 - To the cloud and back, a chat about exiting the cloud

2025-06-2045:50

29 - Using managed identities and federated credentials to eliminate secrets

2025-02-1136:56

28 - DeepSeek and the current state of GenAI

2025-02-0431:26

27 - Microsoft AIgnite - AI with a hint of other things

2024-12-0951:00

26 - A hitchhikers guide to Entra licensing

2024-09-0301:03:30

25 - Google Next, Copilot for Security and Passkeys

2024-05-0356:11

24 - Microsoft Graph scopes giving attackers high hopes

2024-02-1557:29

23 - So much new stuff and some other fluff

2023-10-0301:15:32

22 - Microsoft security issue development and MobileIron based attacks on government

2023-08-0451:47

21 - Global Secure Access and Entrataining renaming stress

2023-07-1456:40

20 - Build news unfurled, followed by a Microsoft licensing ranting whirl

2023-06-0952:40

19 - Ai ai ai

2023-05-0539:53

18 - Antipatterns for cloud no longer covered in shroud

2023-01-2353:33

17 - News from conventions and other mentions

2022-12-0259:11

16 - Education and certification

2022-10-0701:02:21

15 - Summer TLDR

2022-09-0451:46

14 - Find your zen with a CDN

2022-05-1843:56

13 - Can you trust PaaS services?

2022-03-2251:34

12 - CI/CD or AC/DC?

2022-02-2858:18

11 - Workload Identities gone wild

2022-01-3101:00:38

00:00

24 - Microsoft Graph scopes giving attackers high hopes

#box-pro-ellipsis-176512489183093{-webkit-line-clamp:2;}24 - Microsoft Graph scopes giving attackers high hopes

24 - Microsoft Graph scopes giving attackers high hopes

24 - Microsoft Graph scopes giving attackers high hopes