Known as Entra ID, the system stores each Azure cloud customer’s user identities, sign-in access controls, applications, and ...

A pair of flaws in Microsoft's Entra ID identity and access management system could have allowed an attacker to gain access ...

Though patched, the flaw underscores systemic risks in cloud identity systems where legacy APIs and invisible delegation ...

July 17, 2025; CVSS 10.0 Entra ID bug via legacy Graph enabled cross-tenant impersonation risking tenant compromise.

A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every ...

"Since the Azure AD Graph API is an older API for managing the core Azure AD / Entra ID service, access to this API could ...

Microsoft recently patched a critical security vulnerability in its Entra ID system. The flaw, tracked as CVE-2025-55241, could have been exploited to take control of any ...

This privacy impact assessment (PIA) assesses the privacy implications of collecting information from users of Aotearoa Data Explorer.Download the ...

Scattered Spider targets U.S. financial services in new cyberattacks, using Azure AD social engineering and cloud data ...

A security researcher claims to have found a flaw that could have handed him the keys to almost every Entra ID tenant ...

Spiders don't change their stripes. Despite gang members' recent retirement claims, Scattered Spider hasn't exited the ...

The Democrat says the tech giant bears some responsibility for last year's Ascension Healthcare cyberattack, which affected ...