“You’ll lose your malware, too,” Marta replied. “FSLogix will roam your profile. Your apps will be in the image. But the ghost? The ghost dies every night.”
Because if you can access a virtual desktop from a beach in Bali, so can a threat actor—if they steal the right key. securing cloud pcs and azure virtual desktop
She showed him the log: A single API call to the AVD management plane, executed with stolen credentials. The call changed the assignment of a developer’s Cloud PC from “User A” to “Attacker B.” Then, the attacker launched a new session. No brute force. No malware. Just a misconfigured Azure RBAC role. “You’ll lose your malware, too,” Marta replied