Microsoft Entra ID flaw allowed hijacking any company's tenant

A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every ...
GovInfoSecurity

Microsoft Patches Critical Entra ID Flaw

Microsoft is disclosing a vulnerability that allowed hackers to obtain admin access to virtually any cloud instance of ...
Windows Report

Microsoft Patches A Critical Entra ID Vulnerability Discovered by Dutch Hacker

A Dutch researcher found a flaw in Microsoft Entra ID that could expose every tenant worldwide. Microsoft patched it within ...
CSO Online

Entra ID vulnerability exposes gaps in cloud identity trust models, experts warn

Though patched, the flaw underscores systemic risks in cloud identity systems where legacy APIs and invisible delegation ...

One token to pwn them all: Entra ID bug could have granted access to every tenant

A security researcher claims to have found a flaw that could have handed him the keys to almost every Entra ID tenant ...
Techzine Europe

Dutch hacker: all Microsoft Entra ID tenants at risk

Dutch security researcher Dirk-jan Mollema discovered a critical vulnerability in Microsoft Entra ID that allowed full access ...

Actor auth tokens gave Global Admin access across Azure Entra ID tenants

"Since the Azure AD Graph API is an older API for managing the core Azure AD / Entra ID service, access to this API could ...
Redmond Magazine

Pondering the Graph that Binds SharePoint and Office 365

Office 365 artificial intelligence API may help individual users manage content complexity in the next wave of SharePoint releases that use Microsoft Graph. As Microsoft last month outlined deeper ...