Cybersecurity Threat Advisory: TrustSink attack targets Microsoft Entra ID
TrustSink is an attack technique that abuses Microsoft Entra ID’s federated trust model. It uses a rogue MFA provider to
account takeover, Advisory, Credential theft, cybersecurity, Cybersecurity Threat Advisory, Featured, Federated Identity, identity security, MFA, Microsoft Entra ID, multi-factor authentication, phishing, Security, Syndicated, threat, TrustSink
- May 31, 2024
OneDrive, are you there? It’s me, MFA
Most organizations like to configure OneDrive to automatically sign-in with the user’s credentials. However, this doesn’t always work when multi-factor