July 17, 2025; CVSS 10.0 Entra ID bug via legacy Graph enabled cross-tenant impersonation risking tenant compromise.

Known as Entra ID, the system stores each Azure cloud customer’s user identities, sign-in access controls, applications, and ...

A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every ...

Cohesity Identity Resilience builds on Semperis' proven expertise and technology in Active Directory protection and recovery, delivering automated, malware-free recovery capabilities that minimize ...

Even after 25 years, Microsoft Active Directory (AD) remains the backbone of identity and access management in up to 90% of enterprise IT environments worldwide, making it a high-value target for ...

“Fundamentally, the issue that leads to Kerberoasting is bad passwords,” Tim Medin, the researcher who coined the term ...

A security researcher claims to have found a flaw that could have handed him the keys to almost every Entra ID tenant ...

Active Directory (AD) is the backbone for identity and privilege management in Windows environments, making it a prime attack vector for the Scattered Spider hacker group (also tracked as UNC3944, ...

A Dutch security researcher has published an indepth analysis of a critical vulnerability that could have allowed attackers ...

In today’s threat landscape, identity governance doesn’t stop at the firewall. It extends to every card reader, turnstile, ...

Though patched, the flaw underscores systemic risks in cloud identity systems where legacy APIs and invisible delegation ...