Microsoft Teams, Patreon, and Uber

Blue Security

English - September 19, 2022 01:53 - 29 minutes - 31.9 MB - ★★★★★ - 3 ratings
Technology Homepage Download Apple Podcasts Google Podcasts Overcast Castro Pocket Casts RSS feed

Previous Episode: Cloudflare and Kiwi Farms

Next Episode: Kerberoasted

This week, Adam and Andy talk about Microsoft Teams and the post-exploit technique that was discovered by Vetra's Project Team and the decision of Patreon to lay off their entire internal information security team. The also talk about Uber's on-going cybersecurity incident including some initial reports of how it happened as well as mitigations to prevent this type of attack in the future.

-------------------------------------------

Youtube Video Link: https://youtu.be/FWnEma4hOWQ

-------------------------------------------

Documentation:

https://www.vectra.ai/blogpost/undermining-microsoft-teams-security-by-mining-tokens

https://techcrunch.com/2022/09/09/patreon-security-layoffs/

https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-passwordless

https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-passwordless-faqs

-------------------------------------------

Website: http://bluesecuritypod.com

Twitter: https://twitter.com/bluesecuritypod

Linkedin: https://www.linkedin.com/company/bluesecpod