Microsoft Entra ID

Microsoft Entra adds a seven-day safeguard against irreversible identity deletion

cybersecurity, identity protection, Microsoft, Microsoft Entra ID, News /

Microsoft Entra adds a seven-day safeguard against irreversible identity deletion 2026-11-12 at 13:04 By Anamarija Pogorelec Microsoft Entra’s Hard Deletion Protection, now in preview, gives administrators a seven-day window to recover selected identities before they can be permanently erased. The feature is designed to help organizations respond to accidental or malicious deletion of critical directory […]

Microsoft Entra adds a seven-day safeguard against irreversible identity deletion Read More »

Critical Microsoft Entra ID vulnerability exploited in the wild (CVE-2026-69836)

CVE, Microsoft Entra ID, News, vulnerability, vulnerability disclosure /

Critical Microsoft Entra ID vulnerability exploited in the wild (CVE-2026-69836) 2026-08-21 at 15:20 By Sinisa Markovic Microsoft has patched a critical remote code execution vulnerability (CVE-2026-69836) in Entra ID, reportedly exploited in the wild. Entra ID is Microsoft’s cloud identity service, formerly Azure Active Directory, that verifies logins and controls access to Microsoft 365, Azure, […]

Critical Microsoft Entra ID vulnerability exploited in the wild (CVE-2026-69836) Read More »

Microsoft Entra ID is removing an extra MFA hurdle for Windows Hello and macOS PSSO users

authentication, MFA, Microsoft, Microsoft Entra ID, News /

Microsoft Entra ID is removing an extra MFA hurdle for Windows Hello and macOS PSSO users 2026-08-10 at 16:19 By Sinisa Markovic Microsoft is changing how Entra ID handles MFA for people who sign in with Windows Hello for Business (WHfB) or macOS Platform Single Sign-On (PSSO). The rollout reaches worldwide and GCC tenants starting […]

Microsoft Entra ID is removing an extra MFA hurdle for Windows Hello and macOS PSSO users Read More »

Microsoft makes Windows SSO prompts easier to manage

authentication, cybersecurity, Microsoft, Microsoft Entra ID, News, policy, SSO, Windows /

Microsoft makes Windows SSO prompts easier to manage 2026-07-16 at 11:47 By Anamarija Pogorelec Microsoft is introducing a new registry-based policy that lets IT administrators automatically accept Windows SSO permissions on Windows 11 versions 24H2 and 25H2 devices managed with Microsoft Entra ID. Users with personal Microsoft accounts and devices outside policy-managed environments will continue […]

Microsoft makes Windows SSO prompts easier to manage Read More »

Microsoft Entra ID authentication overhaul to start in September 2026

authentication, MFA, Microsoft, Microsoft Entra ID, News, passkeys /

Microsoft Entra ID authentication overhaul to start in September 2026 2026-07-14 at 11:49 By Anamarija Pogorelec Microsoft will begin rolling out passkeys as the default authentication experience for Microsoft Entra ID in the public cloud on September 1, 2026. Organizations with SMS or voice authentication enabled will automatically be enabled for passkeys. The next time […]

Microsoft Entra ID authentication overhaul to start in September 2026 Read More »

Fake OAuth client IDs are helping attackers slip past sign-in logs

authentication, credentials, cybercrime, Don't miss, Microsoft, Microsoft Entra ID, News, OAuth, Proofpoint, spoofing /

Fake OAuth client IDs are helping attackers slip past sign-in logs 2026-07-13 at 15:10 By Mirko Zorz Attackers running account enumeration against Microsoft cloud tenants have added a step that keeps their probing out of the usual telemetry. They spoof the OAuth client ID, the globally unique identifier assigned to an application and passed as […]

Fake OAuth client IDs are helping attackers slip past sign-in logs Read More »

Microsoft Entra pushes passkeys, tightens identity security

access management, authentication, credentials, identity management, Microsoft, Microsoft Entra ID, News /

Microsoft Entra pushes passkeys, tightens identity security 2026-06-02 at 15:47 By Anamarija Pogorelec Microsoft has released multiple identity and network access capabilities for Entra, its family of identity and network access products that help organizations implement a zero trust security strategy, over the last 30 days. Features reaching general availability Identity and authentication updates Phishing-resistant […]

Microsoft Entra pushes passkeys, tightens identity security Read More »

Microsoft hands Entra ID users new option for MFA

authentication, MFA, Microsoft, Microsoft Entra ID, News /

Microsoft hands Entra ID users new option for MFA 2026-03-25 at 12:46 By Anamarija Pogorelec Organizations rely on MFA to enforce identity checks before granting access to systems and services. Microsoft has made external MFA generally available in Microsoft Entra ID, expanding support for third-party identity providers. Configure external MFA in Microsoft Entra ID (Source: […]

Microsoft hands Entra ID users new option for MFA Read More »

Conditional Access enforcement change coming to Microsoft Entra

Microsoft, Microsoft Entra ID, News, policy /

Conditional Access enforcement change coming to Microsoft Entra 2026-01-29 at 14:05 By Sinisa Markovic Microsoft will change how Conditional Access policies are enforced in Microsoft Entra starting March 27, 2026, with a phased rollout continuing through June 2026. The change affects sign-ins through client applications that request only OIDC scopes or a limited set of […]

Conditional Access enforcement change coming to Microsoft Entra Read More »

Microsoft Entra ID will auto-enable passkey profiles, synced passkeys

authentication, Microsoft, Microsoft Entra ID, News, passkeys /

Microsoft Entra ID will auto-enable passkey profiles, synced passkeys 2026-01-26 at 10:52 By Sinisa Markovic Starting March 2026, Microsoft Entra ID will automatically enable passkey profiles and introduce support for synced passkeys. Passkey profiles move into general availability The update brings passkey profiles and synced passkeys into general availability. Administrators gain access to a new […]

Microsoft Entra ID will auto-enable passkey profiles, synced passkeys Read More »

Attackers turn trusted OAuth apps into cloud backdoors

attack tools, automation, cloud security, Don't miss, enterprise, Hot stuff, Microsoft Entra ID, News, OAuth, privileged accounts, Proofpoint /

Attackers turn trusted OAuth apps into cloud backdoors 2025-10-22 at 15:43 By Zeljka Zorz Attackers are increasingly abusing internal OAuth-based applications to gain persistent access to cloud environments, Proofpoint researchers warn. These apps often remain unnoticed for quite some time and allow attackers to maintain access to high-privileged accounts even after passwords are reset or […]

Attackers turn trusted OAuth apps into cloud backdoors Read More »

BloodHound 8.0 debuts with major upgrades in attack path management

Black Hat USA 2025, Don't miss, Duo Security, GitHub, Microsoft Entra ID, News, open source, software, SpecterOps /

BloodHound 8.0 debuts with major upgrades in attack path management 2025-08-05 at 10:11 By Help Net Security SpecterOps has released BloodHound 8.0, the latest iteration of its open-source attack path management platform, featuring major enhancements and expanded capabilities. BloodHound OpenGraph The release introduces BloodHound OpenGraph, a major advancement in identity attack path management that uncovers […]

BloodHound 8.0 debuts with major upgrades in attack path management Read More »

Microsoft introduces new access policies in Entra to boost MFA usage

access management, Don't miss, enterprise, Hot stuff, identity protection, MFA, Microsoft, Microsoft Entra ID, News, policy /

Microsoft introduces new access policies in Entra to boost MFA usage 07/11/2023 at 18:17 By Helga Labus As part of a broader initiative to strengthen security, Microsoft is rolling out Microsoft-managed Conditional Access policies in Entra ID (formerly Azure Active Directory) to increase the use of multifactor authentication (MFA) for enterprise accounts. Microsoft Entra Conditional […]

Microsoft introduces new access policies in Entra to boost MFA usage Read More »

Assess multi-cloud security with the open-source CNAPPgoat project

AWS, Ermetic, GitHub, Microsoft Azure, Microsoft Entra ID, News, open source, penetration testing, software /

Assess multi-cloud security with the open-source CNAPPgoat project 03/08/2023 at 07:31 By Help Net Security Ermetic released CNAPPgoat, an open-source project that allows organizations to test their cloud security skills, processes, tools, and posture in interactive sandbox environments that are easy to deploy and destroy. It is available on GitHub. CNAPPgoat supports AWS, Azure (Microsoft […]

Assess multi-cloud security with the open-source CNAPPgoat project Read More »

Open-source penetration testing tool BloodHound CE released

Active Directory, Azure, cybersecurity, Don't miss, GitHub, Microsoft Azure, Microsoft Entra ID, News, open source, penetration testing, software, SpecterOps /

Open-source penetration testing tool BloodHound CE released 02/08/2023 at 06:32 By Mirko Zorz SpecterOps released version 5.0 of BloodHound Community Edition (CE), a free and open-source penetration testing solution that maps attack paths in Microsoft Active Directory (AD) and Azure (including Azure AD/Entra ID) environments. It is available for free on GitHub. Identifying simple Attack […]

Open-source penetration testing tool BloodHound CE released Read More »

Scroll to Top