#microsoftentra — Public Fediverse posts

I also wanted to implement some optional or new #OIDC aspects, in particular enforcement of phishing-resistant authentication using RFC8176 Auth Method Reference and proprietary #MicrosoftEntra Conditional Access AuthContext.

Also a fully-automated testing pipeline with live #OPNsense, #Keykloak, and #Authentik instance is something I am really exciteted about!

On that way multiple minor improvements went into the OPNsense core project as well so everyone wins 🙃

I also wanted to implement some optional or new #OIDC aspects, in particular enforcement of phishing-resistant authentication using RFC8176 Auth Method Reference and proprietary #MicrosoftEntra Conditional Access AuthContext.

Also a fully-automated testing pipeline with live #OPNsense, #Keykloak, and #Authentik instance is something I am really exciteted about!

On that way multiple minor improvements went into the OPNsense core project as well so everyone wins 🙃

I also wanted to implement some optional or new #OIDC aspects, in particular enforcement of phishing-resistant authentication using RFC8176 Auth Method Reference and proprietary #MicrosoftEntra Conditional Access AuthContext.

Also a fully-automated testing pipeline with live #OPNsense, #Keykloak, and #Authentik instance is something I am really exciteted about!

On that way multiple minor improvements went into the OPNsense core project as well so everyone wins 🙃

I also wanted to implement some optional or new #OIDC aspects, in particular enforcement of phishing-resistant authentication using RFC8176 Auth Method Reference and proprietary #MicrosoftEntra Conditional Access AuthContext.

Also a fully-automated testing pipeline with live #OPNsense, #Keykloak, and #Authentik instance is something I am really exciteted about!

On that way multiple minor improvements went into the OPNsense core project as well so everyone wins 🙃

Microsoft has fixed CVE-2026-69836 in Entra ID, a CVSS 10.0 vulnerability tied to insecure deserialization.

According to Microsoft, an unauthorised attacker could have executed code remotely over the network, without prior privileges or user interaction.

The flaw was found and fixed before the CVE was published, and the company reports no evidence of exploitation in real-world attacks.

Entra ID customers do no…

https://en.hacks.gr/i-microsoft-ekleise-krisimo-keno-asfaleias-sto-entra-id-prin-apo-ti-dimosieysi-toy-cve/

#MicrosoftEntra #CVE #CloudSecurity #ApplicationSecurity

A critical deserialization vulnerability (CVE-2026-69836) has been actively exploited in Microsoft Entra ID. The flaw could allow unauthorized access to identity and access management functions across Azure, M365, and Dynamics CRM Online.

#CriticalVulnerability #MicrosoftEntra #IdentitySecurity #Deserialization

https://cyberworldops.eu/en/cve-2026-69836-critical-vulnerability-exploited-in-microsoft-entra-id

A critical deserialization vulnerability (CVE-2026-69836) has been actively exploited in Microsoft Entra ID. The flaw could allow unauthorized access to identity and access management functions across Azure, M365, and Dynamics CRM Online.

#CriticalVulnerability #MicrosoftEntra #IdentitySecurity #Deserialization

https://cyberworldops.eu/en/cve-2026-69836-critical-vulnerability-exploited-in-microsoft-entra-id

A critical deserialization vulnerability (CVE-2026-69836) has been actively exploited in Microsoft Entra ID. The flaw could allow unauthorized access to identity and access management functions across Azure, M365, and Dynamics CRM Online.

#CriticalVulnerability #MicrosoftEntra #IdentitySecurity #Deserialization

https://cyberworldops.eu/en/cve-2026-69836-critical-vulnerability-exploited-in-microsoft-entra-id

A massive Azure directory data leak exposes millions of corporate records from McDonald's, Vodafone, and TCS on the dark web.

#Azure #DataBreach #Cybersecurity #MicrosoftEntra #InfoSec

https://meterpreter.org/azure-directory-data-leak/?utm_source=mastodon&utm_medium=jetpack_social

A massive Azure directory data leak exposes millions of corporate records from McDonald's, Vodafone, and TCS on the dark web.

#Azure #DataBreach #Cybersecurity #MicrosoftEntra #InfoSec

https://meterpreter.org/azure-directory-data-leak/?utm_source=mastodon&utm_medium=jetpack_social

Graph: pulizia delle vecchie versioni del modulo dopo un update https://gioxx.org/2026/08/17/graph-modulo-powershell-rimozione-versioni-vecchie

#accountutente #lavoro #microsoft #microsoft365 #microsoftazure #microsoftentra #microsoftgraph #powershell #powershellpermicrosoft365

Graph: pulizia delle vecchie versioni del modulo dopo un update https://gioxx.org/2026/08/17/graph-modulo-powershell-rimozione-versioni-vecchie

#accountutente #lavoro #microsoft #microsoft365 #microsoftazure #microsoftentra #microsoftgraph #powershell #powershellpermicrosoft365

Graph: pulizia delle vecchie versioni del modulo dopo un update https://gioxx.org/2026/08/17/graph-modulo-powershell-rimozione-versioni-vecchie

#accountutente #lavoro #microsoft #microsoft365 #microsoftazure #microsoftentra #microsoftgraph #powershell #powershellpermicrosoft365

Graph: pulizia delle vecchie versioni del modulo dopo un update https://gioxx.org/2026/08/17/graph-modulo-powershell-rimozione-versioni-vecchie

#accountutente #lavoro #microsoft #microsoft365 #microsoftazure #microsoftentra #microsoftgraph #powershell #powershellpermicrosoft365

🆕 🛡️ Here's how to use the Conditional Access What If tool to test and troubleshoot your Conditional Access policies.

https://thedxt.ca/2026/08/microsoft-entra-id-conditional-access-what-if/

#Microsoft #Entra #ConditionalAccess #Microsoft365 #MicrosoftEntra #EntraID

🆕 🛡️ Here's how to use the Conditional Access What If tool to test and troubleshoot your Conditional Access policies.

https://thedxt.ca/2026/08/microsoft-entra-id-conditional-access-what-if/

#Microsoft #Entra #ConditionalAccess #Microsoft365 #MicrosoftEntra #EntraID

🆕 🛡️ Here's how to use the Conditional Access What If tool to test and troubleshoot your Conditional Access policies.

https://thedxt.ca/2026/08/microsoft-entra-id-conditional-access-what-if/

#Microsoft #Entra #ConditionalAccess #Microsoft365 #MicrosoftEntra #EntraID

🆕 🛡️ Here's how to use the Conditional Access What If tool to test and troubleshoot your Conditional Access policies.

https://thedxt.ca/2026/08/microsoft-entra-id-conditional-access-what-if/

#Microsoft #Entra #ConditionalAccess #Microsoft365 #MicrosoftEntra #EntraID

🆕 🛡️ Here's how to use the Conditional Access What If tool to test and troubleshoot your Conditional Access policies.

https://thedxt.ca/2026/08/microsoft-entra-id-conditional-access-what-if/

#Microsoft #Entra #ConditionalAccess #Microsoft365 #MicrosoftEntra #EntraID

🛡️ One of my favorite features in Entra is Conditional Access. I made a blog post about Conditional Access. Check it out!

https://thedxt.ca/2026/08/microsoft-entra-id-conditional-access/

#Microsoft #Entra #ConditionalAccess #Microsoft365 #MicrosoftEntra #EntraID

🛡️ One of my favorite features in Entra is Conditional Access. I made a blog post about Conditional Access. Check it out!

https://thedxt.ca/2026/08/microsoft-entra-id-conditional-access/

#Microsoft #Entra #ConditionalAccess #Microsoft365 #MicrosoftEntra #EntraID

🛡️ One of my favorite features in Entra is Conditional Access. I made a blog post about Conditional Access. Check it out!

https://thedxt.ca/2026/08/microsoft-entra-id-conditional-access/

#Microsoft #Entra #ConditionalAccess #Microsoft365 #MicrosoftEntra #EntraID

🛡️ One of my favorite features in Entra is Conditional Access. I made a blog post about Conditional Access. Check it out!

https://thedxt.ca/2026/08/microsoft-entra-id-conditional-access/

#Microsoft #Entra #ConditionalAccess #Microsoft365 #MicrosoftEntra #EntraID

🛡️ One of my favorite features in Entra is Conditional Access. I made a blog post about Conditional Access. Check it out!

https://thedxt.ca/2026/08/microsoft-entra-id-conditional-access/

#Microsoft #Entra #ConditionalAccess #Microsoft365 #MicrosoftEntra #EntraID

A vishing attack tricks Microsoft 365 users into passkey phishing, letting O-UNC-066 enroll its own passkey and hijack Entra accounts for extortion.

#Vishing #Passkey #Phishing #MicrosoftEntra #AccountTakeover

http://securityonline.info/entra-passkey-phishing/?utm_source=mastodon&utm_medium=jetpack_social

A vishing attack tricks Microsoft 365 users into passkey phishing, letting O-UNC-066 enroll its own passkey and hijack Entra accounts for extortion.

#Vishing #Passkey #Phishing #MicrosoftEntra #AccountTakeover

http://securityonline.info/entra-passkey-phishing/?utm_source=mastodon&utm_medium=jetpack_social

Millions of Microsoft Entra accounts have been targeted in OAuth client ID spoofing campaigns, allowing attackers to probe usernames, test credentials, and evade common sign-in detections without registering an app or exploiting a vulnerability.

Listen to this news: https://hackread.com/microsoft-entra-accounts-oauth-client-id-spoofing/

#MicrosoftEntra #OAuth #Cybersecurity #Microsoft #Vulnerability

Millions of Microsoft Entra accounts have been targeted in OAuth client ID spoofing campaigns, allowing attackers to probe usernames, test credentials, and evade common sign-in detections without registering an app or exploiting a vulnerability.

Listen to this news: https://hackread.com/microsoft-entra-accounts-oauth-client-id-spoofing/

#MicrosoftEntra #OAuth #Cybersecurity #Microsoft #Vulnerability

Millions of Microsoft Entra accounts have been targeted in OAuth client ID spoofing campaigns, allowing attackers to probe usernames, test credentials, and evade common sign-in detections without registering an app or exploiting a vulnerability.

Listen to this news: https://hackread.com/microsoft-entra-accounts-oauth-client-id-spoofing/

#MicrosoftEntra #OAuth #Cybersecurity #Microsoft #Vulnerability

Millions of Microsoft Entra accounts have been targeted in OAuth client ID spoofing campaigns, allowing attackers to probe usernames, test credentials, and evade common sign-in detections without registering an app or exploiting a vulnerability.

Listen to this news: https://hackread.com/microsoft-entra-accounts-oauth-client-id-spoofing/

#MicrosoftEntra #OAuth #Cybersecurity #Microsoft #Vulnerability

Millions of Microsoft Entra accounts have been targeted in OAuth client ID spoofing campaigns, allowing attackers to probe usernames, test credentials, and evade common sign-in detections without registering an app or exploiting a vulnerability.

Listen to this news: https://hackread.com/microsoft-entra-accounts-oauth-client-id-spoofing/

#MicrosoftEntra #OAuth #Cybersecurity #Microsoft #Vulnerability

Device Code Phishing via une page Microsoft légitime — l'URL est correcte, le domaine est réel, et pourtant l'attaque fonctionne. Ça illustre bien pourquoi "vérifier l'URL" ne suffit plus comme réflexe de sécurité : le flux d'authentification lui-même devient le vecteur. La surface d'attaque s'est déplacée vers les protocoles. #infosec #phishing #MicrosoftEntra
https://securelist.com/microsoft-device-code-phishing-attack/120350/

If you’ve ever wondered whether your identity architecture is truly your own, you need to see what Spec Kit does with Microsoft Entra. Stop delegating, and start orchestrating decisions that reflect your values and vision.

Read more 👉 https://lttr.ai/Ar7ma

#M365ShowPodcast #MicrosoftEntra #M365Show

🥩🥩Mr T-Bone tip!🥩🥩[New from Tech Community]
Fresh Entra updates are here from MrTbone_se 🎉 Dive into June 2026 highlights, smarter security wins, and admin-friendly improvements 🚀🔐

#MicrosoftEntra #CyberSecurity #MVPBuzz #Security #MicrosoftTechCommunity
👉👉 https://tip.tbone.se/LSd2EK [AI generated, Human reviewed]

https://winbuzzer.com/2026/06/01/microsoft-to-tighten-entra-id-password-reset-rules-xcxwbn/

Microsoft will require registered authentication methods for Entra ID password resets from September 7, pushing admins to close enrollment gaps early.

#MicrosoftEntraID #MicrosoftEntra #Authentication #Security #Cybersecurity #Microsoft #Microsoft365

https://winbuzzer.com/2026/06/01/microsoft-to-tighten-entra-id-password-reset-rules-xcxwbn/

Microsoft will require registered authentication methods for Entra ID password resets from September 7, pushing admins to close enrollment gaps early.

#MicrosoftEntraID #MicrosoftEntra #Authentication #Security #Cybersecurity #Microsoft #Microsoft365

https://winbuzzer.com/2026/06/01/microsoft-to-tighten-entra-id-password-reset-rules-xcxwbn/

Microsoft will require registered authentication methods for Entra ID password resets from September 7, pushing admins to close enrollment gaps early.

#MicrosoftEntraID #MicrosoftEntra #Authentication #Security #Cybersecurity #Microsoft #Microsoft365

https://winbuzzer.com/2026/06/01/microsoft-to-tighten-entra-id-password-reset-rules-xcxwbn/

Microsoft will require registered authentication methods for Entra ID password resets from September 7, pushing admins to close enrollment gaps early.

#MicrosoftEntraID #MicrosoftEntra #Authentication #Security #Cybersecurity #Microsoft #Microsoft365

https://winbuzzer.com/2026/06/01/microsoft-to-tighten-entra-id-password-reset-rules-xcxwbn/

Microsoft will require registered authentication methods for Entra ID password resets from September 7, pushing admins to close enrollment gaps early.

#MicrosoftEntraID #MicrosoftEntra #Authentication #Security #Cybersecurity #Microsoft #Microsoft365

----------------

🎯 Threat Intelligence
===================

Device Code Lab (DCL) is a professional-grade Phishing-as-a-Service (PhaaS) platform designed to exploit the Microsoft Entra OAuth device code flow. The analysis reveals a mature toolkit with extensive post-exploitation and defense evasion capabilities.

🔹 Technical Overview

DCL automates device code phishing against Microsoft Entra. Once a victim completes device code authentication, the platform captures tokens and provides operators with a full post-exploitation suite.

Key Backend API Endpoints (distinctive signatures for log hunting):
• /api/tokens/{id}/capture-prt — Primary Refresh Token capture via virtual device registration
• /api/tokens/{id}/prt-refresh — PRT reactivation after token revocation
• /api/tokens/{id}/ertsauth-cookies — 14-day ESTSAUTH session cookie generation
• /api/tokens/{id}/refresh-to-resource — FOCI cross-resource pivot
• /api/tokens/refresh-all — Bulk token refresh across all captured sessions
• /api/tokens/{id}/message-search — Cross-mailbox KQL sweep
• /api/landing/deploy/cloudflare — Cloudflare Worker landing page deployment
• /api/cloaker/{id}/status — Redirector kill switch
• /api/tokens/dedupe-archive — Deduplication of multi-capture accounts
• /api/tokens/import/txt — Bulk token import from Telegram notification format

Infrastructure:
• api.controltkeusa[.]com — IPs: 104[.]219[.]239[.]125, 172[.]81[.]130[.]130
• api.babalfashion[.]com — IPs: 67[.]215[.]253[.]44; front: babalfashion[.]com (104[.]21[.]78[.]8, 172[.]67[.]214[.]105)
• api.skysharegroup[.]com — IPs: 192[.]3[.]225[.]100; front: skysharegroup[.]com (104[.]21[.]85[.]226)

The platform protects operator accounts with TOTP 2FA. The login flow returns 403 with totp_required: true if TOTP is omitted, mirroring legitimate security practices.

🔹 Detection Opportunities

1. First-Time Device Code Authentication (hunt-2025-043): Flags users with no device code auth history in 30 days. Strong behavioral indicator where device code is rarely used legitimately.

2. FOCI Multi-Resource Token Exchange Burst (hunt-2025-044): Single FOCI-capable client_id exchanging refresh tokens against 3+ distinct resource endpoints within 10 minutes. Direct post-exploitation signature.

3. Device Code Auth + FOCI Burst (hunt-2025-045): Successful device code auth correlated with FOCI burst for same user within 20 minutes. Highest-confidence signal for completed token theft.

Attack chain: phishing lure → victim completes device code auth → token captured → FOCI pivot across Microsoft services → persistent access via PRT refresh and ESTSAUTH cookies even after revocation.

Defenders should note that PRT refresh specifically bypasses token revocation, making detection before the FOCI pivot window the most effective defensive position.

🔹 ThreatIntel #DeviceCodePhishing #PhaaS #MicrosoftEntra #FOCI

🔗 Source: https://newtonpaul.com/blog/device-code-lab-post-exploit/

🟦 Entra Tenant Governance | Find Configuration Drift

New preview lets admins detect tenant configuration drift natively across Entra and related services. 🔹

Define JSON baselines as configuration as code and create scheduled monitors. Monitors run every six hours and produce run summaries and detailed drift objects with property level diffs. Govern external tenants via B2B signals and role based templates from a single admin center. 💡

💡 Configuration as code baseline
🔍 Six hour monitor interval
⚖️ Cross tenant governance via B2B signals

▶︎ https://www.hubsite365.com/en-ww/pro-office-365/?id=78675908-1859-f111-bec7-7c1e5273f078&topic=eb4ea787-ac86-ec11-93b0-6045bd8f31a1&theater=true

#MICROSOFTENTRA #IDENTITYSECURITY #ZEROTRUST #CLOUDSECURITY

🟦 Entra Tenant Governance | Find Configuration Drift

New preview lets admins detect tenant configuration drift natively across Entra and related services. 🔹

Define JSON baselines as configuration as code and create scheduled monitors. Monitors run every six hours and produce run summaries and detailed drift objects with property level diffs. Govern external tenants via B2B signals and role based templates from a single admin center. 💡

💡 Configuration as code baseline
🔍 Six hour monitor interval
⚖️ Cross tenant governance via B2B signals

▶︎ https://www.hubsite365.com/en-ww/pro-office-365/?id=78675908-1859-f111-bec7-7c1e5273f078&topic=eb4ea787-ac86-ec11-93b0-6045bd8f31a1&theater=true

#MICROSOFTENTRA #IDENTITYSECURITY #ZEROTRUST #CLOUDSECURITY

🟦 Entra Tenant Governance | Find Configuration Drift

New preview lets admins detect tenant configuration drift natively across Entra and related services. 🔹

Define JSON baselines as configuration as code and create scheduled monitors. Monitors run every six hours and produce run summaries and detailed drift objects with property level diffs. Govern external tenants via B2B signals and role based templates from a single admin center. 💡

💡 Configuration as code baseline
🔍 Six hour monitor interval
⚖️ Cross tenant governance via B2B signals

▶︎ https://www.hubsite365.com/en-ww/pro-office-365/?id=78675908-1859-f111-bec7-7c1e5273f078&topic=eb4ea787-ac86-ec11-93b0-6045bd8f31a1&theater=true

#MICROSOFTENTRA #IDENTITYSECURITY #ZEROTRUST #CLOUDSECURITY

🟦 Entra Tenant Governance | Find Configuration Drift

New preview lets admins detect tenant configuration drift natively across Entra and related services. 🔹

Define JSON baselines as configuration as code and create scheduled monitors. Monitors run every six hours and produce run summaries and detailed drift objects with property level diffs. Govern external tenants via B2B signals and role based templates from a single admin center. 💡

💡 Configuration as code baseline
🔍 Six hour monitor interval
⚖️ Cross tenant governance via B2B signals

▶︎ https://www.hubsite365.com/en-ww/pro-office-365/?id=78675908-1859-f111-bec7-7c1e5273f078&topic=eb4ea787-ac86-ec11-93b0-6045bd8f31a1&theater=true

#MICROSOFTENTRA #IDENTITYSECURITY #ZEROTRUST #CLOUDSECURITY

⚠️ CRITICAL: CVE-2026-42901 in Microsoft Entra (CVSS 10) enables remote privilege escalation via origin validation error. Patch now to prevent full system compromise! Fix: https://radar.offseq.com/threat/cve-2026-42901-cwe-346-origin-validation-error-in--0744f928 #OffSeq #MicrosoftEntra #Vulnerability #Cybersecurity

⚠️ CRITICAL: CVE-2026-42901 in Microsoft Entra (CVSS 10) enables remote privilege escalation via origin validation error. Patch now to prevent full system compromise! Fix: https://radar.offseq.com/threat/cve-2026-42901-cwe-346-origin-validation-error-in--0744f928 #OffSeq #MicrosoftEntra #Vulnerability #Cybersecurity

⚠️ CRITICAL: CVE-2026-42901 in Microsoft Entra (CVSS 10) enables remote privilege escalation via origin validation error. Patch now to prevent full system compromise! Fix: https://radar.offseq.com/threat/cve-2026-42901-cwe-346-origin-validation-error-in--0744f928 #OffSeq #MicrosoftEntra #Vulnerability #Cybersecurity

⚠️ CRITICAL: CVE-2026-42901 in Microsoft Entra (CVSS 10) enables remote privilege escalation via origin validation error. Patch now to prevent full system compromise! Fix: https://radar.offseq.com/threat/cve-2026-42901-cwe-346-origin-validation-error-in--0744f928 #OffSeq #MicrosoftEntra #Vulnerability #Cybersecurity

MFA werkt. Maar niet als de aanvaller nooit om je wachtwoord vraagt.

EvilTokens is een platform dat phishing als dienst aanbiedt en in vijf weken meer dan 340 Microsoft 365-organisaties in Europa en de VS heeft gecompromitteerd.

'Peter's Analyse'. Elke dag een nieuwe vraag die je kunt beantwoorden op https://www.ccinfo.nl

Heeft uw organisatie al gecontroleerd of sessietokens een maximale geldigheidsduur hebben?

#Cybersecurity #Phishing #MicrosoftEntra #ThreatIntelligence #Cyberbeveiliging

MFA werkt. Maar niet als de aanvaller nooit om je wachtwoord vraagt.

EvilTokens is een platform dat phishing als dienst aanbiedt en in vijf weken meer dan 340 Microsoft 365-organisaties in Europa en de VS heeft gecompromitteerd.

'Peter's Analyse'. Elke dag een nieuwe vraag die je kunt beantwoorden op https://www.ccinfo.nl

Heeft uw organisatie al gecontroleerd of sessietokens een maximale geldigheidsduur hebben?

#Cybersecurity #Phishing #MicrosoftEntra #ThreatIntelligence #Cyberbeveiliging

MFA werkt. Maar niet als de aanvaller nooit om je wachtwoord vraagt.

EvilTokens is een platform dat phishing als dienst aanbiedt en in vijf weken meer dan 340 Microsoft 365-organisaties in Europa en de VS heeft gecompromitteerd.

'Peter's Analyse'. Elke dag een nieuwe vraag die je kunt beantwoorden op https://www.ccinfo.nl

Heeft uw organisatie al gecontroleerd of sessietokens een maximale geldigheidsduur hebben?

#Cybersecurity #Phishing #MicrosoftEntra #ThreatIntelligence #Cyberbeveiliging

MFA werkt. Maar niet als de aanvaller nooit om je wachtwoord vraagt.

EvilTokens is een platform dat phishing als dienst aanbiedt en in vijf weken meer dan 340 Microsoft 365-organisaties in Europa en de VS heeft gecompromitteerd.

'Peter's Analyse'. Elke dag een nieuwe vraag die je kunt beantwoorden op https://www.ccinfo.nl

Heeft uw organisatie al gecontroleerd of sessietokens een maximale geldigheidsduur hebben?

#Cybersecurity #Phishing #MicrosoftEntra #ThreatIntelligence #Cyberbeveiliging

📢⚠️ Microsoft Entra Agent ID flaw allowed privilege escalation and tenant takeover via Service Principal abuse, now fully patched by Microsoft.

Read: https://hackread.com/microsoft-entra-agent-id-flaw-tenant-takeover/

#CyberSecurity #Vulnerability #Microsoft #MicrosoftEntra #AI

📢⚠️ Microsoft Entra Agent ID flaw allowed privilege escalation and tenant takeover via Service Principal abuse, now fully patched by Microsoft.

Read: https://hackread.com/microsoft-entra-agent-id-flaw-tenant-takeover/

#CyberSecurity #Vulnerability #Microsoft #MicrosoftEntra #AI

📢⚠️ Microsoft Entra Agent ID flaw allowed privilege escalation and tenant takeover via Service Principal abuse, now fully patched by Microsoft.

Read: https://hackread.com/microsoft-entra-agent-id-flaw-tenant-takeover/

#CyberSecurity #Vulnerability #Microsoft #MicrosoftEntra #AI

📢⚠️ Microsoft Entra Agent ID flaw allowed privilege escalation and tenant takeover via Service Principal abuse, now fully patched by Microsoft.

Read: https://hackread.com/microsoft-entra-agent-id-flaw-tenant-takeover/

#CyberSecurity #Vulnerability #Microsoft #MicrosoftEntra #AI

📢⚠️ Microsoft Entra Agent ID flaw allowed privilege escalation and tenant takeover via Service Principal abuse, now fully patched by Microsoft.

Read: https://hackread.com/microsoft-entra-agent-id-flaw-tenant-takeover/

#CyberSecurity #Vulnerability #Microsoft #MicrosoftEntra #AI

Sicherheitslücke in Microsoft Entra ID: Agent-ID-Administratoren konnten beliebige Dienstprinzipale übernehmen

Angreifer konzentrieren sich in Microsoft-Entra-ID-Umgebungen zunehmend nicht mehr ausschließlich auf menschliche Administratorkonten. Stattdessen rücken Dienstidentitäten und Rollen der mittleren Verwaltungsebene in den Fokus.

https://www.all-about-security.de/sicherheitsluecke-in-microsoft-entra-id-agent-id-administratoren-konnten-beliebige-dienstprinzipale-uebernehmen/

#microsoft #entraid #agentid #MicrosoftEntra

Microsoft Bolsters Entra with Passkey Support on Windows

Say goodbye to passwords! Microsoft is bolstering Entra with passkey support on Windows, allowing users to authenticate with a face scan, fingerprint, or PIN for added security and convenience.

https://osintsights.com/microsoft-bolsters-entra-with-passkey-support-on-windows?utm_source=mastodon&utm_medium=social

#PasskeySupport #WindowsHello #MicrosoftEntra #PasswordlessAuthentication #Mfa

via #AIFoundry : Introducing Toolboxes in Foundry

https://ift.tt/vGLnOAa
#Foundry #Toolboxes #Toolbox #FoundryToolbox #AI #AIAgents #ToolDiscovery #Build #Consume #Governance #UnifiedEndpoint #MCP #OpenAPI #OAuth #MicrosoftEntra #Azure #AzureAI #Authentication #Observability …