Hope Walker
LightNews LightNews
1cemoon.bsky.social
Hope Walker
@1cemoon.bsky.social
87 followers 59 following 2 posts
Senior Security Researcher at SpecterOps. All opinions are my own.
Posts Replies Media Videos
1cemoon.bsky.social
Check out my new blog diving deeper into BroCI.
specterops.io SpecterOps @specterops.io · 27d
Microsoft introduced nested application auth (NAA) in 2024. Researchers spotted FOCI similarities & dubbed it brokered client IDs (BroCI).

@1cemoon.bsky.social documents NAA flows and BroCI—filling a gap for research on Microsoft identity protocols. ghst.ly/3Jdhp7Z
NAA or BroCI...? Let Me Explain - SpecterOps
This writeup is a summary of knowledge and resources for nested application authentication (NAA) and brokered client IDs (BroCI)
ghst.ly
October 15, 2025 at 6:35 PM
1cemoon.bsky.social
Check out my new blog on nested app authentication.
specterops.io SpecterOps @specterops.io · Aug 13
Why should Microsoft's Nested App Authentication (NAA) should be on your security team's radar? @1cemoon.bsky.social breaks down NAA and shows how attackers can pivot between Azure resources using brokered authentication. ghst.ly/45h2Zw3
Going for Broke(ring) – Offensive Walkthrough for Nested App Authentication - SpecterOps
In depth walkthrough for using nested app authentication (NAA), or BroCI, for offensive engagements to access information and resources.
ghst.ly
August 13, 2025 at 4:43 PM
Reposted by Hope Walker
specterops.io
What can you expect to learn in our Azure Security Fundamentals training at #SOCON2025? Course architect
@1cemoon.bsky.social shares that students will dive into:

➡️ Azure Resource Manager
➡️ Common security misconfigurations
➡️ Entra ID authentication

Register today: ghst.ly/reg-socon25-...
December 11, 2024 at 8:28 PM