A cookie secret named after the cookie itself let attackers skip Entra MFA and become admin. https://intel.threadlinqs.com/threat/TL-2026-2892 #ThreatIntel #YMS #EntraID #SessionForgery
@threadlinqs.bsky.social
Explore
@threadlinqs.bsky.social
@threadlinqs.bsky.socialA cookie secret named after the cookie itself let attackers skip Entra MFA and become admin. https://intel.threadlinqs.com/threat/TL-2026-2892 #ThreatIntel #YMS #EntraID #SessionForgery