https://blog.it-learn.io/identity/Recent content in The Identity Brief on it-learn.io | IT, Networking & Cybersecurity BlogHugoen-usFri, 21 Aug 2026 00:00:00 +0000https://blog.it-learn.io/identity/2026-08-21-identity-entra-id-cvss-10-0-rce-cve-2026-69836-exploited/Fri, 21 Aug 2026 00:00:00 +0000it-learn.iohttps://blog.it-learn.io/identity/2026-08-21-identity-entra-id-cvss-10-0-rce-cve-2026-69836-exploited/Microsoft patches a maximum-severity RCE in Entra ID exploited in the wild, Russian APTs weaponize OAuth consent flows for persistent access, Unit 42 documents identity phishing inside Slack and Teams, and the ChainDrop npm worm steals developer credentials at machine speed through AI agent hooks.https://blog.it-learn.io/identity/2026-08-19-identity-password-spraying-surges-155x-legacy-auth-bypasses-mfa/Wed, 19 Aug 2026 00:00:00 +0000it-learn.iohttps://blog.it-learn.io/identity/2026-08-19-identity-password-spraying-surges-155x-legacy-auth-bypasses-mfa/Huntress tracked 81 million password-spray login attempts in two weeks — all through SMTP, POP3, and IMAP protocols that bypass MFA entirely. Today’s Identity Brief also covers a CVSS 9.8 macOS authentication bypass now on CISA KEV, unverified claims of 3.6M Entra tenant records stolen, and TWINLOOT — a Python implant running full C2 inside SharePoint and Teams via overprivileged OAuth apps.