Varonis launches ‘Breach at the Beach’ Entra ID training CTF

As reported by Bleeping Computer, Varonis Threat Labs has developed "Breach at the Beach," a new hands-on training experience designed to enhance cybersecurity skills related to Microsoft Entra ID. This Capture the Flag (CTF) event aims to provide security practitioners with practical knowledge of data exfiltration techniques within Entra ID environments, reflecting real-world threats.

The "Breach at the Beach" CTF, created by Varonis researchers Doron Kapah and Mark Vaitsman, simulates attacks within Entra ID, focusing on how threat actors exploit legitimate features, particularly non-human identities like AI agents and service principals. The training emphasizes detecting threats without relying on AI assistance and learning to navigate complex, evolving log data. The challenges are inspired by actual customer incidents, offering a realistic learning experience. The initiative addresses the growing attack surface created by the rapid adoption of AI and the evolving nature of identity management.

The CTF is designed for various security roles, including red and blue teams, and offers CPE credits upon completion. Varonis will also host live sessions at upcoming industry events like Black Hat USA and DEF CON 34.

Source: Bleeping Computer