entra-id

Briefings·30 min

• Black Hat
• AppSec
• Date: Aug 2025
• Location: Las Vegas

Vaisha Bernard

Security researchers expose authorization flaws in Microsoft Entra OAuth implementations, gaining lateral access across internal enterprise services.

Cloud Village·23 min

• DEF CON
• Cloud
• Date: Aug 2025
• Location: Las Vegas

Nevada · Kam

Evolving SquarePhish to weaponize QR codes for Entra ID Primary Refresh Token extraction.

Ekoparty 2025·55 min

• EKOPARTY
• Red Team
• Date: 2025
• Location: Ekoparty

Nestori Syynimaa

Nestori Syynimaa details Deep-dive to Entra ID Token Theft Protection.

FIRST·42 min

• FIRST
• Blue Team
• Date: 2025
• Location: First

Engineers explore architecture and security mechanisms for Seeing Through the Fog: Interpreting Entra ID Signals During AiTM Attacks.

fwd:cloudsec North America 2025·21 min

• FWD CLOUDSEC
• Cloud
• Date: 2025
• Location: Fwd Cloudsec

Security researchers examine technical aspects of I SPy: Rethinking Entra ID research for new paths to Global Admin.

Insomni'hack 2025·51 min

• INSOMNIHACK
• Blue Team
• Date: 2025
• Location: Insomnihack

John Stoner

John Stoner investigates Improving Your Hunting And Detection In Entra ID And O365.

RomHack Conference 2025·42 min

• ROMHACK
• Blue Team
• Date: 2025
• Location: Romhack

Dr Nestori Syynimaa

Analyzes romHack 2025 - Dr Nestori Syynimaa - The Ultimate Guide for Protecting Hybrid Identities in Entra ID and evaluates key implications for security practitioners.

Talks·58 min

• TROOPERS
• Blue Team
• Date: Jun 2025
• Location: Heidelberg

Finding Entra ID CA Bypasses

Discusses TROOPERS25: Finding Entra ID CA Bypasses - The Structured Way and evaluates key implications for security practitioners.

Talks·55 min

• TROOPERS
• Blue Team
• Date: Jun 2025
• Location: Heidelberg

Explores TROOPERS25: RBAC - The Shady Place Behind Basic Entra ID Security and evaluates key implications for security practitioners.

Talks·46 min

• TROOPERS
• Blue Team
• Date: Jun 2025
• Location: Heidelberg

Investigates TROOPERS25: The Ultimate Guide for Protecting Hybrid Identities in Entra ID and evaluates key implications for security practitioners.

TROOPERS IT Security Conference·52 min

• TROOPERS
• Red Team
• Date: 2025
• Location: Troopers

Analysts investigate attack surfaces and defenses concerning Delete Is Easy - Recovery Is Not: The Reality of Entra ID Backup & Restore.

Wild West Hackin' Fest·14 min

• WWHF
• Hardware
• Date: 2025
• Location: Wwhf

Jonathan Rogers

Analysts investigate attack surfaces and defenses concerning Getting Started in Entra ID Security | Jonathan Rogers.

Wild West Hackin' Fest Deadwood 2025·49 min

• WWHF
• Blue Team
• Date: 2025
• Location: Wwhf

Sean Metcalf

Demonstrates from User to Entra ID Admin | Sean Metcalf and evaluates key implications for security practitioners.

DEFCON Switzerland·32 min

• DEF CON
• Red Team
• Date: 2024
• Location: Defcon

Dirk-Jan Mollema

Dirk-Jan Mollema investigates Hacking Every Entra ID Tenant With Actor Tokens.

BruCON Security Conference·44 min

• BRUCON
• Red Team
• Date: 2022
• Location: Brucon

Nestori Syynimaa

Nestori Syynimaa explores 09 - BruCON 0x11 - Deep-dive to Entra ID Token Theft Protection.

Cloud Village·39 min

• DEF CON
• Cloud
• Date: Aug 2021
• Location: Las Vegas

Batuhan Sancak

Batuhan Sancak demonstrates advanced attack techniques targeting Azure Active Directory, including Primary Refresh Token (PRT) theft and OAuth abuse.