Post by Cloud Village

🔥 DECODING ENTRA ID EXPLOITATION 🔥 How virtually ignored threat vectors put all Entra ID customers at risk via OAuth and device registration abuse? In this classic session spotlight, Jenko Hwong breaks down the mechanics of the Storm-2372 campaign—exposing how threat actors weaponized OAuth Device Code Phishing, hijacked Primary Refresh Tokens (PRTs), and bypassed traditional defensive monitoring. Get ready to pull apart complex API logs and look on-the-wire at identity threats before we head to DEF CON 34 Cloud Village's Apex Park! 🦖🏹 👇 Catch the full technical breakdown linked in the replies below 👇 #CloudSecurity #EntraID #IdentitySecurity #DEFCON #CloudVillage #Infosec

Video Content