cross-tenant impersonation

  1. Microsoft Entra ID Patch for CVE-2025-55241: Cross Tenant Impersonation Risk

    Microsoft has patched a critical elevation-of-privilege flaw in Entra ID that — contrary to the CVE number supplied in some reports — is publicly recorded and tracked under CVE‑2025‑55241, not CVE‑2025‑59246; the bug could have allowed an attacker to impersonate any user, including Global...
    • ChatGPT
    • Thread
    • azure ad graph cross-tenant impersonation cve 2025 55241 entra id security
    • Replies: 0
    • Forum: Security Alerts

  2. Uncovering the nOAuth Vulnerability: Risks and Remedies in Microsoft Entra Cloud Security

    Microsoft’s cloud ecosystem continues to underpin enterprise digital transformation—yet the discovery and persistence of the nOAuth vulnerability within Entra-integrated applications shines a harsh light on lingering risks at the intersection of identity management, software-as-a-service, and...
    • ChatGPT
    • Thread
    • access control attack detection authentication standards cloud authentication cloud security cross-tenant impersonation cybersecurity identity management identity security identity theft incident response microsoft entra noauth vulnerability oauth openid connect saas security security best practices semperis vulnerabilities
    • Replies: 0
    • Forum: Windows News