July 17, 2025; CVSS 10.0 Entra ID bug via legacy Graph enabled cross-tenant impersonation risking tenant compromise.
Though patched, the flaw underscores systemic risks in cloud identity systems where legacy APIs and invisible delegation ...
Microsoft is disclosing a vulnerability that allowed hackers to obtain admin access to virtually any cloud instance of ...