Microsoft Entra ID flaw allowed hijacking any company's tenant

A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every ...
The Hacker News

Scattered Spider Resurfaces With Financial Sector Attacks Despite Retirement Claims

Scattered Spider targets U.S. financial services in new cyberattacks, using Azure AD social engineering and cloud data ...
GitHub

Intermittent token acquisition failure - "Could not fetch access token for Azure"

We are facing intermittent failures in token acquisition via MSAL when running Azure DevOps pipelines that deploy Web Apps using the AzureRmWebAppDeployment@5 task. Until September 5, 2025, all ...
GitHub

Download Microsoft Entra ID (formerly Azure AD)

This guide presents a detailed, stepwise procedure for installing and configuring Microsoft Entra ID on Windows, enabling seamless synchronization between your existing on-premises Active Directory ...
Infosecurity-magazine.com

Azure AD Credentials Exposed in Public App Settings File

A cybersecurity assessment has uncovered a serious vulnerability involving Azure Active Directory (Azure AD). Resecurity’s HUNTER Team discovered that application credentials, specifically the ...