For example, in the 2023 MGM assault, the attacker right accessed an account with Super Admin permissions in Okta, which they coupled with an inbound federation attack to impersonate any person from the tenant, get Azure admin privileges, and authenticate for the Azure-hosted VMware atmosphere where by they deployed ransomware. example.com's serve