Securing Cloud Pcs And Azure Virtual Desktop -

“But I’ll lose my desktop shortcuts!” a power user complained.

The attack had a name now: Midnight Proxy . securing cloud pcs and azure virtual desktop

She showed him the log: A single API call to the AVD management plane, executed with stolen credentials. The call changed the assignment of a developer’s Cloud PC from “User A” to “Attacker B.” Then, the attacker launched a new session. No brute force. No malware. Just a misconfigured Azure RBAC role. “But I’ll lose my desktop shortcuts

A Security Architect’s Diary

The Ghost in the Gold Image