PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How to Spot and Stop Rogue Device Joins

wiz.io | blog | #ai-security | #microsoft | #identity-security | #entra-id | #phishing | #detection | #wiz | #device-registration
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Nearly one in seven Entra ID environments saw rogue device registrations in 90 days, Wiz finds; attackers abuse DRS via device-code phishing, and AI-realistic device names erode old fingerprints.
Published
Collected

Related coverage

blog · wiz.io
From Phishing to LLMjacking: Threat Actors Targeting Cloud Billing Accounts for LLM Usage
How a single Google Search ad click leads to credential theft, hijacking of cloud billing account, and hundreds of thousands of dollars incurred in unauthorized AI API usage
blog · wiz.io
3 OAuth TTPs Seen This Month — and How to Detect Them with Entra ID Logs
Three OAuth techniques attackers use in Azure, and how Entra ID sign-in logs and JWT claims expose them; includes Wiz telemetry on prevalence and ready-to-use KQL detection queries.
blog · projectblack.io
Should I Azure AD Sync/Entra Cloud Sync Domain Admins?
Syncing Domain Admins into Entra ID lets attackers pivot from compromised on-prem AD to the cloud, and back via password writeback. CIS and Microsoft advise keeping privileged admin accounts cloud-only.
blog · about.gitlab.com
Scaling Git for the agentic software factory
GitLab is building next-gen source control for agentic workloads, combining machine-scale performance with context, security, and governance to deliver trusted software.
blog · netspi.com
Abusing Entra ID Misconfigurations to Bypass MFA
NetSPI describes an MFA bypass found in an external assessment: an Entra ID Conditional Access misconfiguration with Duo let attackers reuse an SSO token without any MFA prompt.
blog · netspi.com
Common Red Team Techniques vs Blue Team Controls Infographic
Shares an infographic mapping common red team phishing attack workflows to blue team detective and preventative controls, plus practical stealth tips for both offensive operators and defenders.
Back