Actor auth tokens gave Global Admin access across Azure Entra ID tenants

"Since the Azure AD Graph API is an older API for managing the core Azure AD / Entra ID service, access to this API could ...

Microsoft Entra ID flaw allowed hijacking any company's tenant

A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every ...
Bleeping Computer

GitHub can now auto-block commits containing API keys, auth tokens

GitHub has announced on Monday that it expanded its code hosting platform's secrets scanning capabilities for GitHub Advanced Security customers to block secret leaks automatically. Secret scanning is ...
dbta

Intruder Launches Autoswagger, a Free Tool to Expose Hidden API Authorization Flaws

Intruder, a leader in attack surface management, is releasing Autoswagger—a free, open-source tool that scans OpenAPI-documented APIs for broken authorization vulnerabilities. According to the company ...
The Hacker News

Microsoft Patches Critical Entra ID Flaw Enabling Global Admin Impersonation Across Tenants

July 17, 2025; CVSS 10.0 Entra ID bug via legacy Graph enabled cross-tenant impersonation risking tenant compromise.
Business Wire

Intruder Introduces Autoswagger: The Free Tool To Expose Hidden API Authorization Flaws

LONDON--(BUSINESS WIRE)--Intruder, a leader in attack surface management, has launched Autoswagger—a free, open-source tool that scans OpenAPI-documented APIs for broken authorization vulnerabilities.