Microsoft’s Azure Active Directory (Azure AD), the company’s go-to cloud-based identity and access management service (IAM), carries a severe flaw that enabled threat actors to install backdoors.
This is according to extensive research from the Secureworks Counter Threat Unit (CTU), which says the issue could also let hackers modify access rights to bypass multi-factor authentication and block admin access without proper logging, and gather information on policy configurations to enable future attacks.
