Azure compromise likely with Microsoft Entra ID design issue

DedicatedICS
Yanac

Hackread reports that Microsoft Entra ID has been integrated with a design flaw, which could allow guests invited into an organizational Azure tenant to establish and transfer subscriptions, as well as obtain “Owner” rights over such subscriptions, without admin privileges.SCM feed for Endpoint/Device SecurityRead More