Undetected Azure Active Directory Brute-Force Attacks

Updated: September 30, 2021

Summary

In late June 2021, Secureworks® Counter Threat Unitâ„¢ (CTU) researchers discovered a flaw in the protocol used by the Azure Active Directory Seamless Single Sign-On feature. This flaw allows threat actors to perform single-factor…