A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every ...

July 17, 2025; CVSS 10.0 Entra ID bug via legacy Graph enabled cross-tenant impersonation risking tenant compromise.

A Dutch researcher found a flaw in Microsoft Entra ID that could expose every tenant worldwide. Microsoft patched it within ...

Microsoft is disclosing a vulnerability that allowed hackers to obtain admin access to virtually any cloud instance of ...

A security researcher claims to have found a flaw that could have handed him the keys to almost every Entra ID tenant ...

For years, executives from Microsoft and document management platform provider M-Files would meet across the aisles at ...

For years, executives from Microsoft and document management platform provider M-Files would meet across the aisles at ...

Though patched, the flaw underscores systemic risks in cloud identity systems where legacy APIs and invisible delegation ...

Known as Entra ID, the system stores each Azure cloud customer’s user identities, sign-in access controls, applications, and ...

Due to a vulnerability in Entra ID, attackers could have gained access to any tenants as administrators. The security issue has been resolved for some time.

Dutch security researcher Dirk-jan Mollema discovered a critical vulnerability in Microsoft Entra ID that allowed full access ...