New TrustSink attack steals passwords via rogue MFA provider

The TrustSink attack exploits the trust Microsoft Entra places in configured external MFA providers. An attacker with a compromised privileged Entra account ...