Email: [email protected]
A new attack known as TrustSink allows attackers with privileged access to register rogue MFA providers that capture user passwords during legitimate Microsoft Entra logins.
