Topic

Entra ID: news, advisories and analysis

5 articlesUpdated 17 Oct 2026

CyberSecureToday covers Entra ID across 5 articles published between 13 Sep 2026 and 17 Oct 2026. The coverage includes 3 vulnerability advisories and 2 incident or breach reports. 2 advisories are rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Entra ID most often intersect with Microsoft 365, Cloud Security and Microsoft, with Technology, Cloud & SaaS the most affected sector. The most recent story, “ConnectWise Cloud Backup Credential Leak Weaponized to Hijack Microsoft 365 Tenants”, was published 17 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

Cyber AttackCloud & SaaS
ConnectWise Cloud Backup Credential Leak Weaponized to Hijack Microsoft 365 Tenants
A compromised vendor credential in ConnectWise Cloud Backup allowed threat actors to abuse OAuth application tokens across hundreds of Microsoft 365 customer tenants.
Aisha Noor17 Oct 202610 min read
Cyber AttackGov & Defence
China-Aligned TA419 Impersonates White House and Anthropic Figures to Target AI Experts
Proofpoint: China-aligned TA419 posed as an ex-White House OSTP official and an Anthropic employee to steal AI policy experts' Microsoft 365 sessions.
Daniel Okafor3 Oct 20266 min read
ThreatsCloud & SaaSCritical
Microsoft Entra ID Critical Deserialization Vulnerability Enables Unauthenticated Remote Code Execution
Microsoft resolves maximum-severity CVSS 10.0 vulnerability CVE-2026-69836 in Entra ID allowing unauthenticated remote code execution via unsafe object deserialization.
Daniel Okafor19 Sep 202612 min read
ThreatsCloud & SaaSCritical
Microsoft ADFS Cloud Identity Privilege Escalation Flaw CVE-2026-56155 Under Active Exploitation
CISA flags Microsoft Active Directory Federation Services vulnerability CVE-2026-56155 (CVSS 9.8) exploited in attacks forging SAML claims across hybrid Azure clouds.
Daniel Okafor16 Sep 202610 min read
ThreatsCloud & SaaS
Microsoft traces passkey-themed lures to persistent Microsoft 365 cloud compromise
Microsoft says attackers are using passkey and SSO update pretexts to capture sessions, add MFA methods and collect Microsoft 365 data.
Aisha Noor13 Sep 20266 min read

Latest coverage

ConnectWise Cloud Backup Credential Leak Weaponized to Hijack Microsoft 365 Tenants

China-Aligned TA419 Impersonates White House and Anthropic Figures to Target AI Experts

Microsoft Entra ID Critical Deserialization Vulnerability Enables Unauthenticated Remote Code Execution

Microsoft ADFS Cloud Identity Privilege Escalation Flaw CVE-2026-56155 Under Active Exploitation

Microsoft traces passkey-themed lures to persistent Microsoft 365 cloud compromise