July 17, 2025; CVSS 10.0 Entra ID bug via legacy Graph enabled cross-tenant impersonation risking tenant compromise.

Security researchers have found a critical vulnerability in Microsoft Entra ID which could have allowed threat actors to gain ...

Until Microsoft lobbed it into a virtual volcano A security researcher claims to have found a flaw that could have handed him ...

A pair of flaws in Microsoft's Entra ID identity and access management system could have allowed an attacker to gain access ...

Microsoft patches CVE-2025-55241, an Azure Entra elevation of privilege vulnerability that could have been exploited to ...

It’s not only our code that needs managing. Modern agentic AI services use APIs to access data, and we need to be sure that access is tightly regulated so that critical and sensitive information doesn ...

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources. Ramya Krishnamoorthy shares a detailed case ...

As more organizations build applications with Azure AI services, security teams and developers are encountering new challenges tied to identity, data access and endpoint exposure. Traditional security ...