Guest users with certain billing roles can create and own subscriptions, potentially gaining persistence and privilege escalation within an organization’s Azure environment. Threat actors can abuse ...

Microsoft confirms that the weekend Entra account lockouts were caused by the invalidation of short-lived user refresh tokens that were mistakenly logged into internal systems. On Saturday morning, ...

Picture this: you’re collaborating with an external partner on a critical project, sharing files and ideas seamlessly through Microsoft 365. Everything is running smoothly—until you pause to consider ...

Security researchers have created a new FIDO downgrade attack against Microsoft Entra ID that tricks users into authenticating with weaker login methods, making them susceptible to phishing and ...

This week Microsoft has announced the general availability of its new Microsoft Entra Suite, designed to provide the industry’s most comprehensive secure access solution for the workforce. Microsoft ...