CognitionX Dubai demo walks through full Microsoft Entra ID kill chain, from discovery to Global Admin
lee_stott · x · 2026-10-15
At CognitionX Emirates 2026 in Dubai, Microsoft Regional Director and Security MVP Seyfallah Tagrerout presented "Attack and Defense of Microsoft Entra ID / AI Agent Environments – Zero Trust Strategy," walking through a full Entra ID kill chain: unauthenticated discovery, password spraying, AiTM/device code phishing, attacks on the password-sync service account, Azure DC pivoting, locating the on-prem AD Sync account, DCSync to replicate all domain hashes, and a bonus path—recovering the AZUREADSSOACC$ password to exploit Entra ID SSO and extract cloud session passwords.
More from Safety
- Rumor: New Anthropic model imminent, apparently behind a batch of high-severity Chrome CVEs — matthew_d_green · 2026-10-15
- Fully-automated combat drones are already on the battlefield, warns Toby Walsh — TobyWalsh · 2026-10-15
- Pope's AI adviser warns Australia's copyright changes risk a new form of colonialism — TobyWalsh · 2026-10-15
- Jamie Dimon Warns of AI Agent Risks to Bank Accounts; JPMorgan Blocks Outside Agents — AccBalanced · 2026-10-15
- 'A lot of you are into alignment faking': meme nod to Anthropic's alignment faking paper — dejavucoder · 2026-10-15
- The Guardian examines the rise of AI-powered workplace surveillance and productivity tracking — nordicinst · 2026-10-15