Topic

Identity Security: news, advisories and analysis

4 articlesUpdated 19 Sep 2026

CyberSecureToday covers Identity Security across 4 articles published between 6 Sep 2026 and 19 Sep 2026. The coverage includes 2 vulnerability advisories and 2 analysis or guidance pieces. 2 advisories are rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Identity Security most often intersect with Microsoft, Entra ID and Azure AD, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Microsoft Entra ID Critical Deserialization Vulnerability Enables Unauthenticated Remote Code Execution”, was published 19 Sep 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSCritical
Microsoft Entra ID Critical Deserialization Vulnerability Enables Unauthenticated Remote Code Execution
Microsoft resolves maximum-severity CVSS 10.0 vulnerability CVE-2026-69836 in Entra ID allowing unauthenticated remote code execution via unsafe object deserialization.
Daniel Okafor19 Sep 202612 min read
ThreatsCloud & SaaSCritical
Microsoft ADFS Cloud Identity Privilege Escalation Flaw CVE-2026-56155 Under Active Exploitation
CISA flags Microsoft Active Directory Federation Services vulnerability CVE-2026-56155 (CVSS 9.8) exploited in attacks forging SAML claims across hybrid Azure clouds.
Daniel Okafor16 Sep 202610 min read
InsightsCloud & SaaS
Entra ID's February 2027 Sign-In Block: A Migration Plan for Affected Accounts
Microsoft retires SMS and voice MFA on 1 February 2027 with a blocking passkey prompt and no opt-out. Here is a dated plan for service accounts, break-glass and phoneless users.
Aisha Noor11 Sep 20266 min read
InsightsCloud & SaaS
MFA failed in 84% of incident responses. The problem is the session, not the factor
With 99% of SaaS compromises originating at the identity provider, MFA is no longer the control organisations think they bought. Here is what changed.
Aisha Noor6 Sep 20267 min read

Latest coverage

Microsoft Entra ID Critical Deserialization Vulnerability Enables Unauthenticated Remote Code Execution

Microsoft ADFS Cloud Identity Privilege Escalation Flaw CVE-2026-56155 Under Active Exploitation

Entra ID's February 2027 Sign-In Block: A Migration Plan for Affected Accounts

MFA failed in 84% of incident responses. The problem is the session, not the factor