Outsider Security資安研究員Dirk-jan Mollema揭露今年7月向微軟通報的Entra ID（Azure AD）滿分漏洞CVE-2025-55241，並指出攻擊者一旦濫用，就有機會透過Azure AD Graph API在受害租戶環境進行任意讀寫行為，而且 ...

Microsoft on Thursday announced that Azure AD Graph APIs will stop processing application requests after Feb. 1. "Our next big milestone starts February 1st, when existing applications will be ...

A critical Microsoft authentication vulnerability could have allowed a threat actor to compromise virtually every Entra ID tenant in the world. The elevation of privilege (EoP) vulnerability, tracked ...

A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every company in the world. The fatal mix included undocumented tokens called “actor ...