Security researchers have found a critical vulnerability in Microsoft Entra ID which could have allowed threat actors to gain Global Administrator access to virtually anyone’s tenant - without being ...

"Effectively," wrote Mollema, "this means that with a token I requested in my lab tenant I could authenticate as any user, including Global Admins, in any other tenant." The tokens allowed full access ...

Nation-state espionage operations are increasingly using native Microsoft services to host their command-and-control (C2) needs. A number of unrelated groups in recent years have all come to the same ...