Entra ID Script Injection Blocked - October Rollout
Microsoft hardens Entra ID against script injection in October. Storm-3068 pivoted from password reset to Kubernetes.
Posts tagged: Entra-Id
Storm-3168 Deleted Azure via Service Principals
Storm-3168 used compromised service principals to destroy Azure resources. Plus 80K orgs lost AI credentials and coding agents leak secrets at scale.
Entra ID Drops SMS Login - Feb 2027 Deadline
Microsoft retires Entra ID SMS first-factor by Feb 2027. Plus CVE-2026-58138 Orkes Conductor pre-auth RCE exploited in the wild and Gemini AI breached thre.
Entra ID CVSS 10.0 RCE - CVE-2026-69836 Exploited
CVE-2026-69836 CVSS 10.0 RCE in Microsoft Entra ID exploited in the wild. Russian APTs abuse OAuth consent flows. Phishing moves inside Slack and Teams.