As cited
Copy frozen at (site build).
identity access
Conditional Access Misconfigurations Exposed 55 Orgs with MFA On
Two organizations experienced successful attacks against Microsoft 365 systems despite having Conditional Access policies and multifactor authentication (MFA) enabled, suggesting configuration gaps in their policies. Huntress Managed ISPM identified these misconfigurations and found the issue affected 55 organizations. The article highlights how standard conditional access controls can fail when improperly configured.
Why it matters: Security teams relying on Conditional Access and MFA as primary defenses need to audit their policy configurations immediately, as these controls can be bypassed through misalignment of rules that appears secure on surface review.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
identity access
Conditional Access Misconfigurations Exposed 55 Orgs with MFA On
Two organizations experienced successful attacks against Microsoft 365 systems despite having Conditional Access policies and multifactor authentication (MFA) enabled, suggesting configuration gaps in their policies. Huntress Managed ISPM identified these misconfigurations and found the issue affected 55 organizations. The article highlights how standard conditional access controls can fail when improperly configured.
Why it matters: Security teams relying on Conditional Access and MFA as primary defenses need to audit their policy configurations immediately, as these controls can be bypassed through misalignment of rules that appears secure on surface review.
- Source published
- First seen by Cybersecurity Tracker