Threat actors with elevated privileges could leverage the recently introduced Microsoft Azure Active Directory Cross-Tenant Synchronization feature to facilitate lateral movement to other tenants and establish network persistence, BleepingComputer reports. Already compromised tenants could have their CTS configurations examined to enable the discovery of other tenants that have allowed “Outbound Sync,”

Source: SC Magazine