July 17, 2025; CVSS 10.0 Entra ID bug via legacy Graph enabled cross-tenant impersonation risking tenant compromise.

Microsoft is disclosing a vulnerability that allowed hackers to obtain admin access to virtually any cloud instance of ...

A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every ...

A Dutch researcher found a flaw in Microsoft Entra ID that could expose every tenant worldwide. Microsoft patched it within ...

Office 365 artificial intelligence API may help individual users manage content complexity in the next wave of SharePoint releases that use Microsoft Graph. As Microsoft last month outlined deeper ...

Dutch security researcher Dirk-jan Mollema discovered a critical vulnerability in Microsoft Entra ID that allowed full access ...

"Since the Azure AD Graph API is an older API for managing the core Azure AD / Entra ID service, access to this API could ...