New findings have revealed ongoing threats from an identified security flaw in Microsoft’s Entra ID, possibly allowing nefarious individuals to execute account takeovers in at-risk software-as-a-service (SaaS) platforms.
Identity protection firm Semperis, in a review of 104 SaaS applications, discovered that nine of them were susceptible to Entra ID cross-tenant nOAuth exploitation.
Initially revealed by