Windows Hello for Business Key Can Be Used Without PIN or Biometric
Mollema found that low-privilege processes in a compromised Windows session can use the Windows Hello for Business key without a fresh PIN…
Tag: Entra ID
HollowGraph Malware Uses Microsoft 365 Calendar Events Dated 2050 for C2 and Data Exfiltration
Group-IB has discovered a new espionage implant named HollowGraph that hijacks Microsoft 365 calendars for command-and-control (C2) and data exfiltration. The malware,…
Identity Lifecycle Management Fails for AI Agents: Governance Gaps and Fixes
Identity lifecycle management (ILM) was architected around human principals with employment records, managers, and departure dates. AI agents have none of these,…
Microsoft Entra ID Product
Entra ID (formerly Azure AD) is Microsoft's cloud identity service. HollowGraph refreshes its credentials via DNS to maintain access.
SOCRadar Analyzes Pink Operations
SOCRadar published an analysis of Pink, one of UNC6671's extortion brands, describing its use of tailored Okta and Microsoft Entra ID phishing…