Go offline with the Player FM app!
Dirk-Jan Mollema walks us through The Entra ID Cross-Tenant Vulnerability Discovery– 2025-09-22
Manage episode 508317422 series 2404569
???? Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com
00:00 - PreShow Banter™ — Unnatural European Fridges
03:34 - The Entra ID Cross-Tenant Vulnerability Discovery – BHIS - Talkin’ Bout [infosec] News 2025-09-22
04:14 - Story # 1: One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens
21:32 - Story # 2: Shai-Hulud: Self-Replicating Worm Compromises 500+ NPM Packages
40:50 - OSSPREY – NPM Package @Ctrl/Tinycolor Compromised: Shai Hulud Malware Targets Secrets and Persistence
51:41 - Story # 3: Verified Steam game steals streamer’s cancer treatment donations
57:16 - Story # 4: Heathrow warns of second day of disruption after cyber-attack
205 episodes
Dirk-Jan Mollema walks us through The Entra ID Cross-Tenant Vulnerability Discovery– 2025-09-22
Talkin' About [Infosec] News, Powered by Black Hills Information Security
Manage episode 508317422 series 2404569
???? Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com
00:00 - PreShow Banter™ — Unnatural European Fridges
03:34 - The Entra ID Cross-Tenant Vulnerability Discovery – BHIS - Talkin’ Bout [infosec] News 2025-09-22
04:14 - Story # 1: One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens
21:32 - Story # 2: Shai-Hulud: Self-Replicating Worm Compromises 500+ NPM Packages
40:50 - OSSPREY – NPM Package @Ctrl/Tinycolor Compromised: Shai Hulud Malware Targets Secrets and Persistence
51:41 - Story # 3: Verified Steam game steals streamer’s cancer treatment donations
57:16 - Story # 4: Heathrow warns of second day of disruption after cyber-attack
205 episodes
All episodes
×Welcome to Player FM!
Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.