Name: Meetup May 2024: Security news from Microsoft Build & Bad neighbors
Start: 2024-05-29T16:15:00+02:00
End: 2024-05-29T19:00:00+02:00

We are thrilled to invite you to our third in-person / hybrid meetup of the year on May 29th at 16:15 at Rebel!

Here's what we've got planned:

16:15 - Doors open, time to mingle and grab some food & drinks.
17:00 - Welcome & recap from Microsoft Build (Microsoft Security User Group Organizers)
17:30 - TBA
18:00 - Quick break
18:15 - Bad neighbors: Cross tenant exploitation in Azure and Entra ID - Cody Burkard
19:00 - Event close

We have limited spots for this event so we highly appreciate if you could respond wether you are attending in-person or online when RSVP’ing, this will as well allow us to plan accoaccordingly in terms to limit food waste.

Microsoft Security User Group

Azure Tech Groups

Sponsors since 2022
Venues, Swags, Food and technical help

Microsoft Norway

Devoteam

O3 Cyber

Atea

Rebel

Technology

Software Security

Microsoft

Cybersecurity

Web Security

Network Security

Information Security

Microsoft Azure

Cloud Security

Computer Security

Office 365

Microsoft Office

Sanna Diana

Haflidi Fridthjofsson

Craig Forshaw

Anders Kristiansen

In this talk, we will explore what a guest user is under the hood, and in which scenarios it may be abused. We will introduce a new technique for abusing guest users across tenants, and look at scenarios where that technique could be catastrophic to the security of an organization.




To show how to exploit these scenarios, we will introduce a new azure pentesting tool that can be used to help test and exploit both guest users, as well as the rest of the Azure and Entra ID ecosystem.

Guest users in Entra ID are heavily used for business-to-business collaboration, and administration of cloud resources by partners. However, they have a dark side that is anchored deep within the implementation of guest users in Entra ID.

Cody Burkard