Skip to content
Threat Feed
Subscribe

Tag

Policy-Modification

4 briefs RSS
medium advisory

Unauthorized Modification of Azure Conditional Access Policy

An unauthorized actor modifies an Azure Conditional Access policy, potentially leading to privilege escalation, credential access, persistence, or defense impairment.

Azure Active Directory azure conditional-access policy-modification attack.privilege-escalation attack.credential-access attack.persistence attack.defense-impairment attack.t1548 +1
2r 2t
high advisory

Cisco Duo Policy Modification to Bypass 2FA for Specific Countries

A Duo policy is created or updated to allow access without two-factor authentication (2FA) for users in countries other than the default, potentially weakening the organization's security posture and increasing the risk of unauthorized access.

Duo cisco-duo 2fa-bypass policy-modification
2r 1t
critical advisory

Cisco Duo Policy Bypass via 2FA Disablement

An attacker modifies Cisco Duo policies to allow access without two-factor authentication (2FA), potentially gaining unauthorized access to systems and data.

Duo cisco-duo 2fa-bypass policy-modification
2r 1t
high advisory

Cisco Duo Policy Allowing Outdated Java Usage

A threat actor modifies Cisco Duo policies to permit outdated Java versions, potentially exposing the organization to known vulnerabilities and exploits.

Duo cisco-duo policy-modification outdated-software
2r 1t