This serious Microsoft Entra flaw could have let hackers infiltrate any user, so patch now

Security researchers have found a critical vulnerability in Microsoft Entra ID which could have allowed threat actors to gain ...
Biometric Update

Microsoft patch of widespread Entra ID authentication flaw disclosed

A vulnerability that could potentially have led to the compromise of every Entra ID tenant in the world has been patched ...
The Hacker News

Microsoft Patches Critical Entra ID Flaw Enabling Global Admin Impersonation Across Tenants

July 17, 2025; CVSS 10.0 Entra ID bug via legacy Graph enabled cross-tenant impersonation risking tenant compromise.

Microsoft Entra ID flaw allowed hijacking any company's tenant

A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every ...
CSO Online

Entra ID vulnerability exposes gaps in cloud identity trust models, experts warn

Though patched, the flaw underscores systemic risks in cloud identity systems where legacy APIs and invisible delegation ...

Actor auth tokens gave Global Admin access across Azure Entra ID tenants

"Since the Azure AD Graph API is an older API for managing the core Azure AD / Entra ID service, access to this API could ...
InfoWorld

Microsoft previews Graph API proxy for developers

Graph Developer Proxy allows developers to test their Microsoft Graph applications locally by simulating Microsoft Graph API errors and mocking Microsoft Graph API responses. With Microsoft Graph ...