Product
5 Interestana reports mention Microsoft Entra ID, newest first. Each is summarised from the original reporting and links back to its publisher.
Microsoft has issued a reminder to administrators of Microsoft Entra ID, formerly Azure Active Directory, to transition users away from SMS-based first-factor authentication methods. This proactive measure is crucial as Microsoft plans to retire SMS first-factor sign-in capabilities starting…
Microsoft has released a critical security update to address a severe vulnerability in Microsoft Entra ID, its cloud-based identity and access management service. This vulnerability, assigned a CVSS score of 10.0, the highest possible severity rating, could potentially allow…
Security researcher Malcolm Stagg has disclosed a novel attack class named NatJack, which manipulates network address translation (NAT) connection states to hijack active TCP sessions. This technique allows attackers to spoof DNS responses, reveal victim IP addresses and their mapped…
Microsoft announced that passkeys will become the default authentication method for its Entra ID enterprise identity service beginning in September 2026. This shift aims to enhance security by moving away from traditional password-based logins.
At least two distinct threat actors are actively exploiting a novel evasion technique known as OAuth client ID spoofing in cloud-based campaigns. This method allows malicious actors to enumerate user accounts and validate stolen credentials within Microsoft Entra ID environments.