Microsoft vs Midnight Blizzard (FULL EPISODE) | SS Podcast | EP34 скачать в хорошем качестве

Microsoft vs Midnight Blizzard (FULL EPISODE) | SS Podcast | EP34

During last week’s episode, we briefly spoke about major security incidents that took place between January and February 2024, including the Midnight Blizzard attack. Today, we're delving deeper into the specifics of this attack. From exploiting OAuth mechanics to navigating Microsoft's corporate environment, the attackers demonstrated a level of sophistication that evaded conventional detection controls. Tune in to hear Andy and Paul examine its intricate attack chain and discuss their insights on what Microsoft should do in response. -- 🎙️ Andy Syrewicze is a 20+ year IT Pro specializing in M365, cloud technologies, security, and infrastructure. By day, he's a Security Evangelist for Hornetsecurity, leading technical content. By night, he shares his IT knowledge online or over a cold beer. He holds the Microsoft MVP award in Cloud and Datacenter Management. Find Andy on: LinkedIn   / asyrewicze   Twitter   / asyrewicze   Mastodon @AndySandwich 🎙️ Paul started in IT when DOS and 286 processors were the cutting edge. He runs Expert IT Solutions and works as an IT teacher at a Microsoft IT Academy. Paul is a well-respected technology author and active in the community, writing in-depth technical articles, focused on Hyper-V, System Center, private and hybrid cloud and Office 365 and Azure public cloud technologies. He holds MCSE, MCSA, MCT certifications. Find Paul on: LinkedIn   / paulschnack   -- ➡️ Check out more of the Security Swarm Podcast: https://www.hornetsecurity.com/en/new... -- Episode Resources: Andy and Paul Discuss Malicious OAuth Apps -    • The Security Swarm Podcast - EP24: The Dan...   YouTube Video from Andy Robbins -    • Microsoft Breach: What Happened? What Shou...   BingBang - https://www.wiz.io/blog/azure-active-... -- Timestamps: 2:00 – What does the attack chain for this breach look like? 7:11 – Timeline of the Attack 8:53 – Thoughts on Microsoft’s Response 18:55 – A Definition of an OAuth App and a Service Principal 27:36 – What do Admins need to do about this? 33:20 – Does the speed of change and the scale of Cloud Services negatively impact security? #cybersecurity #ransomware #emailsecurity #microsoftsecurity #midnightblizzard #cyberattack #cybercrime