Tag: Entra

  • Entra ID Security Update Will Block External Sign-In Scripts in October

    Entra ID Security Update Will Block External Sign-In Scripts in October

    Microsoft will begin blocking unauthorized external scripts on Entra ID browser sign-in pages in mid-October 2026. The Entra ID security update aims to reduce script injection risks during authentication, including cross-site scripting attacks. The rollout should finish by late October. Meanwhile, organizations should check whether their sign-in processes rely on tools that inject scripts into…

  • Entra ID Flaw Could Hijack Any Company’s Tenant

    Entra ID Flaw Could Hijack Any Company’s Tenant

    Microsoft recently patched a serious Entra ID flaw that allowed attackers to hijack any organization’s Azure/Entra ID tenant. The flaw emerged from a mix of legacy actor tokens and a vulnerability in the Azure AD Graph API. It risked full tenant takeover without detection. What the Flaw Entailed Security researcher Dirk-jan Mollema discovered that “actor…