CypherCon 2026

I Stole Your Azure Tenant With a Login Link

Eric Boyd

Abstract:

How OAuth, B2B, and Microsoft Graph turn trust into an attack surface

Modern cloud breaches no longer begin with exploits or malware. They begin with a link.

In this live demo, we show how a typical Microsoft Entra and Azure environment can be compromised using nothing more than B2B guest access and a standard “Sign in with Microsoft” OAuth flow. One click is all it takes to create a persistent, API-level foothold inside a tenant, one that survives password resets, bypasses MFA, and quietly expands over time.

This is how modern empires fall. No malware. No zero-days. Just 1999-era trust bugs, cookies, redirects, and pop-ups that were never designed to guard trillion-dollar clouds.

Attendees will leave with a clear understanding of how these attacks actually happen today and what concrete controls and practical defenses stop them.

Eric Boyd

Founder & CEO, responsiveX, Azure & AI MVP, Microsoft RD

Eric D. Boyd is a highly experienced entrepreneur, public speaker, and author with nearly 30 years of experience in the technology industry. He is the founder and CEO of responsiveX, a Microsoft partner and digital innovation consultancy. Eric is a sought-after speaker and thought leader, delivering keynote speeches, breakout sessions, and participating in panel discussions at many industry events. He is a Microsoft Azure and AI MVP, a Regional Director, and has extensive experience helping organizations with system design and architecture, cloud-native development, and artificial intelligence. Eric is the co-author of “Step-by-Step Azure SQL Database” and has contributed to several other publications. He shares his expertise and insights through his blog, social media, podcast interviews, and educational videos. Eric is committed to giving back to the community and supporting the next generation of technology leaders.