<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
    <channel>
        <title>John Novak: 0-Day in Azure B2C and an Account Takeover Chain</title>
        <link>https://peertube.eqver.se/videos/watch/a888e91b-cda6-41f1-94ce-dc4c85ace786</link>
        <description>A DEF CON 31 talk on a chain of vulnerabilities in Microsoft Azure B2C that allowed an unauthenticated attacker to gain access to accounts in any tenant. The research begins with a cryptographic implementation flaw and escalates into a key-recovery attack, leading to full account compromise. The vulnerability could also expose information about undisclosed 0-day bugs submitted by researchers through Microsoft’s Bug Bounty portal.</description>
        <lastBuildDate>Fri, 24 Jul 2026 11:34:20 GMT</lastBuildDate>
        <docs>https://validator.w3.org/feed/docs/rss2.html</docs>
        <generator>PeerTube - https://peertube.eqver.se</generator>
        <image>
            <title>John Novak: 0-Day in Azure B2C and an Account Takeover Chain</title>
            <url>https://peertube.eqver.se/client/assets/images/icons/icon-512x512.png</url>
            <link>https://peertube.eqver.se/videos/watch/a888e91b-cda6-41f1-94ce-dc4c85ace786</link>
        </image>
        <copyright>All rights reserved, unless otherwise specified in the terms specified at https://peertube.eqver.se/about and potential licenses granted by each content's rightholder.</copyright>
        <atom:link href="https://peertube.eqver.se/feeds/video-comments.xml?videoId=a888e91b-cda6-41f1-94ce-dc4c85ace786" rel="self" type="application/rss+xml"/>
    </channel>
</rss>