A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every ...
July 17, 2025; CVSS 10.0 Entra ID bug via legacy Graph enabled cross-tenant impersonation risking tenant compromise.
Known as Entra ID, the system stores each Azure cloud customer’s user identities, sign-in access controls, applications, and ...
Though patched, the flaw underscores systemic risks in cloud identity systems where legacy APIs and invisible delegation ...
Microsoft is disclosing a vulnerability that allowed hackers to obtain admin access to virtually any cloud instance of ...
Microsoft recently patched a critical security vulnerability in its Entra ID system. The flaw, tracked as CVE-2025-55241, could have been exploited to take control of any ...
The Register on MSN
One token to pwn them all: Entra ID bug could have granted access to every tenant
Until Microsoft lobbed it into a virtual volcano A security researcher claims to have found a flaw that could have handed him the keys to almost every Entra ID tenant worldwide.… Dirk-jan Mollema ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback