Microsoft Entra ID flaw allowed hijacking any company's tenant

A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every ...
Redmond Magazine

Azure AD Graphs Will Finally Be Retired in February

Microsoft on Thursday announced that Azure AD Graph APIs will stop processing application requests after Feb. 1. "Our next big milestone starts February 1st, when existing applications will be ...
Redmond Magazine

Microsoft Advises App Developers About 'nOAuth' Attack Route

Microsoft this week addressed findings by security researchers at Descope, who reported a "nOAuth" attack route that's present in some applications leveraging the Azure Active Directory service.
Infosecurity-magazine.com

Azure AD Credentials Exposed in Public App Settings File

A cybersecurity assessment has uncovered a serious vulnerability involving Azure Active Directory (Azure AD). Resecurity’s HUNTER Team discovered that application credentials, specifically the ...