Critical Microsoft Entra ID Vulnerability Could Have Given Hackers Complete Control of Any Company’s Identity System

A critical vulnerability in Microsoft Entra ID (formerly Azure AD) could have allowed attackers to gain complete administrative access to any organization's cloud identity system without detection. The flaw combined legacy "actor tokens" from Microsoft's deprecated Access Control Service w...