A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every ...

July 17, 2025; CVSS 10.0 Entra ID bug via legacy Graph enabled cross-tenant impersonation risking tenant compromise.

A vulnerability that could potentially have led to the compromise of every Entra ID tenant in the world has been patched ...

Microsoft is disclosing a vulnerability that allowed hackers to obtain admin access to virtually any cloud instance of ...

A pair of flaws in Microsoft's Entra ID identity and access management system could have allowed an attacker to gain access ...

A security researcher claims to have found a flaw that could have handed him the keys to almost every Entra ID tenant ...

Microsoft expands Copilot with collaborative agents in Teams, SharePoint and more to boost productivity and reshape teamwork.

Though patched, the flaw underscores systemic risks in cloud identity systems where legacy APIs and invisible delegation ...

Security researchers have found a critical vulnerability in Microsoft Entra ID which could have allowed threat actors to gain ...

"Since the Azure AD Graph API is an older API for managing the core Azure AD / Entra ID service, access to this API could ...

Obsidian Security, leader in SaaS security, today announced the launch of SaaS AI agent defense, giving enterprises the first purpose-built solution to govern how AI agents access data in SaaS ...