Stolen Cloud App Secrets Let Attackers Cascade Through MSP Clients
Daily Cyber News: Stolen Cloud App Secrets Let Attackers Cascade Through MSP Clients
Attackers are using valid Microsoft Entra application secrets to move through managed service providers and target downstream clients at machine speed. About ninety five percent of the observed sign-ins used scripted clients. That included bursts of 24 attempts in 10 seconds.
Key context: Application registrations allow software to authenticate without a person present.
Additional detail: Leaders should give nonhuman identities the same ownership and risk review applied to privileged users.
For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.
Topics: cybersecurity news, cybersecurity, cyber risk, Stolen Cloud App Secrets Let Attackers, Cascade Through MSP Clients, Stolen, Cloud, Secrets, Attackers, Cascade.
