A new Microsoft report reveals that the Storm-0501 threat actor is pivoting to cloud-native ransomware, using cloud tools to exfiltrate and destroy data without malware.

A new Microsoft report reveals that the Storm-0501 threat actor is pivoting to cloud-native ransomware, using cloud tools to exfiltrate and destroy data without malware.

Snowflake External OAuth: Authorization Code flow (+PKCE) Note: The example below creates an authorization URL, and retrieves a valid token from the token endpoint in Entra ID. Please reference …

A researcher uncovered two flaws in Microsoft's Entra ID that, when combined, could have allowed attackers to take over any Azure tenant with global admin privileges.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Imagine your company is a highly secure, important castle.In the old days, everyone worked inside the castle walls.

The “most severe cloud identity vulnerability ever” found in Microsoft Entra and MI6 launches a dark web portal to recruit new spies

Microsoft Threat Intelligence details how APTs abuse Teams and Entra ID integration for recon, vishing, and C2. Attackers use RMM tools and spoofed accounts to breach enterprise environments.

Microsoft Threat Intelligence details how APTs and ransomware groups abuse Teams and Entra ID integration for recon, malware distribution, persistence, and C2 through chat messages.

A flawed HP OneAgent update inadvertently deleted critical Entra ID system certificates on corporate laptops, severing them from the cloud and requiring manual recovery.

Microsoft Authenticator will purge Entra ID credentials from jailbroken/rooted devices starting Feb 2026 to block token theft, enforcing security for enterprise accounts.

Microsoft is integrating Entra ID (formerly Azure AD) into WebView2, enabling seamless, modern authentication like passkey and Conditional Access for embedded web apps.