A vulnerability that could potentially have led to the compromise of every Entra ID tenant in the world has been patched ...

A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every ...

Security researchers have found a critical vulnerability in Microsoft Entra ID which could have allowed threat actors to gain ...

July 17, 2025; CVSS 10.0 Entra ID bug via legacy Graph enabled cross-tenant impersonation risking tenant compromise.

Microsoft is disclosing a vulnerability that allowed hackers to obtain admin access to virtually any cloud instance of ...

Known as Entra ID, the system stores each Azure cloud customer’s user identities, sign-in access controls, applications, and ...

Microsoft recently patched a critical security vulnerability in its Entra ID system. The flaw, tracked as CVE-2025-55241, could have been exploited to take control of any ...

A security researcher claims to have found a flaw that could have handed him the keys to almost every Entra ID tenant ...

Microsoft patches CVE-2025-55241, an Azure Entra elevation of privilege vulnerability that could have been exploited to ...

"Since the Azure AD Graph API is an older API for managing the core Azure AD / Entra ID service, access to this API could ...

Though patched, the flaw underscores systemic risks in cloud identity systems where legacy APIs and invisible delegation ...