Alex Stamos on Nostr: npub13dg3q…gejem npub17lgy0…k9uux Not a surprise such a tenant existed, but they ...

npub13dg3q4swwjtjgj824veaxlvhmlhdk3g93rv00peawn230g0jd6eqlgejem (npub13dg…ejem) npub17lgy0rj5a2nwpnyc4hup6ufpfz7wz6dzcgd3crm6fm2yd34dcz0qlk9uux (npub17lg…9uux) Not a surprise such a tenant existed, but they don't explain how somebody could crawl from tenant admin on contoso.com to microsoft.com production tenant. Federation? Two-way trust? Some kind of complicated hybrid-mode arrangement?

This is what I want to see documented, partially so the rest of us can protect ourselves! Not a single piece of actionable intelligence in Microsoft's Friday dump.