--- title: Breach at the Beach: Play the Ultimate Entra ID CTF description: Varonis Threat Labs researchers created 'Breach at the Beach,' a free Capture the Flag (CTF) experience focused on Microsoft Entra ID attack techniques. The... canonical: https://daily.dev/posts/breach-at-the-beach-play-the-ultimate-entra-id-ctf-pkixiixkj twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Breach at the Beach: Play the Ultimate Entra ID CTF | daily.dev og:description: Varonis Threat Labs researchers created 'Breach at the Beach,' a free Capture the Flag (CTF) experience focused on Microsoft Entra ID attack techniques. The... og:url: https://daily.dev/posts/breach-at-the-beach-play-the-ultimate-entra-id-ctf-pkixiixkj og:image: https://api.daily.dev/og/posts/PKIxiIxKj.png og:image:alt: Breach at the Beach: Play the Ultimate Entra ID CTF og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Breach at the Beach: Play the Ultimate Entra ID CTF **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 7 min read · 0 upvotes · 0 comments ## Summary Varonis Threat Labs researchers created 'Breach at the Beach,' a free Capture the Flag (CTF) experience focused on Microsoft Entra ID attack techniques. The CTF teaches defenders how attackers abuse legitimate Entra ID features (not just misconfigurations), how to investigate non-human identity compromises, and how to work through raw Entra audit logs. Scenarios are based on real customer incidents and cover AI-era threats like service principals and automated workflows. Players earn CPE credits and badges per stage, with in-person events at Black Hat USA 2026 and DEF CON 34. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [4 Reasons Why CTFs Are One of the Best Ways to Grow in Cybersecurity](https://daily.dev/posts/4-reasons-why-ctfs-are-one-of-the-best-ways-to-grow-in-cybersecurity-jokdcaho8) · Snyk · 1 upvotes · 0 comments - [Microsoft warns of max severity Entra ID flaw exploited in attacks](https://daily.dev/posts/microsoft-warns-of-max-severity-entra-id-flaw-exploited-in-attacks-trnyz1ea4) · BleepingComputer · 5 upvotes · 0 comments - [One Foothold, 25 Million Victims: The Risk Inside Modern Breaches](https://daily.dev/posts/one-foothold-25-million-victims-the-risk-inside-modern-breaches-vblscqz3s) · Security Boulevard · 0 upvotes · 0 comments - [TryHackMe Walkthrough: Hacker Holidays Day 1 — The Concierge Knows Too Much](https://daily.dev/posts/tryhackme-walkthrough-hacker-holidays-day-1-the-concierge-knows-too-much-0euappeif) · InfoSec Write-ups · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#authentication](https://daily.dev/tags/authentication) [View this post on daily.dev](https://daily.dev/posts/breach-at-the-beach-play-the-ultimate-entra-id-ctf-pkixiixkj) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Breach at the Beach: Play the Ultimate Entra ID CTF","url":"https://daily.dev/posts/breach-at-the-beach-play-the-ultimate-entra-id-ctf-pkixiixkj","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/breach-at-the-beach-play-the-ultimate-entra-id-ctf-pkixiixkj"},"datePublished":"2026-07-13T14:05:03.604Z","dateModified":"2026-07-13T14:05:30.000Z","description":"Varonis Threat Labs researchers created 'Breach at the Beach,' a free Capture the Flag (CTF) experience focused on Microsoft Entra ID attack techniques. The...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/3ca4291c492e0152e933537fe83e7627?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/3ca4291c492e0152e933537fe83e7627?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/breach-at-the-beach-play-the-ultimate-entra-id-ctf-pkixiixkj","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,authentication","timeRequired":"PT7M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"Breach at the Beach: Play the Ultimate Entra ID CTF"}]} ```