Lightnews — Scholar-powered news

Hope Walker

@1cemoon.bsky.social

86 followers 58 following 2 posts

Senior Security Researcher at SpecterOps. All opinions are my own.

Posts Media Videos Starter Packs

Hope Walker @1cemoon.bsky.social · 1d

Check out my new blog diving deeper into BroCI.

SpecterOps @specterops.io · 1d

Microsoft introduced nested application auth (NAA) in 2024. Researchers spotted FOCI similarities & dubbed it brokered client IDs (BroCI).

@1cemoon.bsky.social documents NAA flows and BroCI—filling a gap for research on Microsoft identity protocols. ghst.ly/3Jdhp7Z

NAA or BroCI...? Let Me Explain - SpecterOps

This writeup is a summary of knowledge and resources for nested application authentication (NAA) and brokered client IDs (BroCI)

ghst.ly

1 1

Hope Walker @1cemoon.bsky.social · Aug 13

Check out my new blog on nested app authentication.

SpecterOps @specterops.io · Aug 13

Why should Microsoft's Nested App Authentication (NAA) should be on your security team's radar? @1cemoon.bsky.social breaks down NAA and shows how attackers can pivot between Azure resources using brokered authentication. ghst.ly/45h2Zw3

Going for Broke(ring) – Offensive Walkthrough for Nested App Authentication - SpecterOps

In depth walkthrough for using nested app authentication (NAA), or BroCI, for offensive engagements to access information and resources.

ghst.ly

5 6

Reposted by Hope Walker

SpecterOps @specterops.io · Dec 11

What can you expect to learn in our Azure Security Fundamentals training at #SOCON2025? Course architect
@1cemoon.bsky.social shares that students will dive into:

➡️ Azure Resource Manager
➡️ Common security misconfigurations
➡️ Entra ID authentication

Register today: ghst.ly/reg-socon25-...

2 2