#entra


Microsoft to block Entra ID script injection attacks starting October

Sep 30, 2026 // 16:56

Microsoft has reminded customers that the Entra ID authentication system will get better protection against external script injection attacks starting next month. The company first […]

Microsoft reminds admins to migrate Entra ID users to passkeys

Sep 21, 2026 // 16:16

Microsoft has reminded administrators to migrate Entra ID users to phishing-resistant methods, such as passkeys, to avoid sign-in disruptions after it retires SMS first-factor sign-in […]

Microsoft warns of max severity Entra ID flaw exploited in attacks

Aug 21, 2026 // 14:17

Microsoft has patched a maximum-severity vulnerability in the Entra ID identity and access management (IAM) platform that has been exploited in attacks. Formerly known as […]

Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution

Aug 21, 2026 // 10:48

Microsoft on Thursday warned of a maximum-severity security flaw in Entra ID that it said has been exploited in the wild, but noted that no […]

Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access

Aug 8, 2026 // 01:08

Entra ID researcher Dirk-jan Mollema demonstrated that malware already running in a signed-in Windows session can silently use the victim’s Windows Hello for Business key […]

Microsoft Entra ID gets passkeys default authentication starting September

Jul 14, 2026 // 15:56

Microsoft has announced that passkeys will become the default authentication method for the Entra ID enterprise identity service starting September 2026. Passkeys will be enabled […]

OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials

Jul 14, 2026 // 14:27

At least two distinct threat actors are weaponizing a novel evasion technique called OAuth client ID spoofing in cloud campaigns, while slipping past telemetry. The […]

Breach at the Beach: Play the Ultimate Entra ID CTF

Jul 13, 2026 // 17:16

Discover how Varonis Threat Labs created Breach at the Beach, a unique Entra ID training experience. Enhance your cybersecurity skills through hands-on learning with this […]

Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access

Jul 10, 2026 // 16:46

A threat actor has been targeting organizations spanning multiple sectors with voice-based fake security requests that prompt Microsoft 365 users to enroll a new Entra […]

Entra passkey enrollment vishing targets Microsoft 365 users

Jul 8, 2026 // 19:57

A threat actor has been targeting organizations across multiple sectors with voice-based fake security requests that ask Microsoft 365 users to enroll a new Entra […]

1 2 Next