A pair of flaws in Microsoft's Entra ID identity and access management system could have allowed an attacker to gain access to virtually all Azure customer accounts.

Plus: A ransomeware gang steals data on 8,000 preschoolers, Microsoft blocks Israel’s military from using its cloud for surveillance, call-recording app Neon hits pause over security holes, and more.

AI in healthcare and other industries won’t fly unless compliance is baked in from day one — not bolted on after.

A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every company in the world.

July 17, 2025; CVSS 10.0 Entra ID bug via legacy Graph enabled cross-tenant impersonation risking tenant compromise.

Microsoft is disclosing a vulnerability that allowed hackers to obtain admin access to virtually any cloud instance of SharePoint or Exchange - although no evidence ...

Microsoft recently patched a critical security vulnerability in its Entra ID system. The flaw, tracked as CVE-2025-55241, could have been exploited to take control of any ...

A vulnerability that could potentially have led to the compromise of every Entra ID tenant in the world has been patched prior to being publicly revealed.