Top all-time · #15558
Semperis
Company blog · semperis.com/blogsecurity
Semperis is the company blog at semperis.com, writing about security. Since 2016, 5 different Hacker News readers have linked it 6 times, most often “UnOAuthorized: Privilege Elevation Through Microsoft Applications”. No feed was found, so read it on the site itself.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
Linked by one HN reader as a earlier example of a serious Entra ID attack, next to a Semperis post on unauthorized privilege in Entra ID. The commenter notes the number of high-severity flaws in the system.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Semperis is the industry's most comprehensive Active Directory security and recovery platform, protecting hybrid AD environments from identity-based attacks.
Most-linked posts?
- UnOAuthorized: Privilege Elevation Through Microsoft Applications2 people · 2 mentions · first linked 2024-09-15
What Hacker News says?
I feel like I remember a similar attack related to Entra ID from a while ago, although I can't remember exactly what it was (maybe [0] or [1]?).. I understand that this is a complex system, but I would be concerned with the number of relatively high severity vulnerabilities being found in it. [0]: https://securitylabs.datadoghq.com/articles/i-spy-escalating... [1]: https://www.semperis.com/blog/unoauthorized-privile…
Comment linking /blog/unoauthorized-privilege-elevation-through-microsoft-applications/
on “One Token to rule them all – Obtaining Global Admin in every Entra ID tenant”Submitted UnOAuthorized: Privilege Elevation Through Microsoft Applications as a story · 2 points
HN discussionSubmitted Windows Privilege Abuse as a story · 1 points
HN discussionSubmitted Golden DMSA: What Is DMSA Authentication Bypass? as a story · 1 points
HN discussionSubmitted Silver SAML: Golden SAML in the Cloud as a story · 1 points
HN discussionSubmitted Microsoft upends traditional password recommendations with new guidance as a story · 1 points
HN discussion