A newly exposed cluster of identity and management-plane flaws has rewritten the threat model for Windows administrators and cloud tenants: an Entra ID “actor token” validation failure that could enable largely undetectable, cross‑tenant impersonation combined with a high‑impact local...