ATTACKING ENTRA METAVERSE: PART 1

Summary from the TLDR InfoSec newsletter

Part 1 of a series of blog posts exploring the Entra metaverse and demonstrating attacks against it. It introduces the concept of the Entra metaverse and demonstrates how the compromise of an Entra user can be used to fully compromise an on-premise AD user. The following posts explore cross-domain attacks and argue that the Entra Tenant is your trust boundary when using Entra.