
Rogue external MFA providers can steal passwords during logins
Varonis 'TrustSink' shows attackers with privileged Entra access can register rogue external MFA providers to harvest plaintext passwords during logins.
1
1 stories, newest first · one card per story

Varonis 'TrustSink' shows attackers with privileged Entra access can register rogue external MFA providers to harvest plaintext passwords during logins.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views