Post by Nathan McNulty on X
Nathan McNulty@NathanMcNulty
XSince everyone is sharing MSRC stories 🙃
I had a PrivEsc from User Admin, a role many give helpdesk or HR, to Global Admin
MSRC: Not a vulnerability, requires a built-in Microsoft app in the tenant to exploit
Also MSRC: It's a vulnerability when someone else submits it🤷♂️
328 likes6 repliesPosted May 29, 2026