Tag Archive
enterprise
3 posts found
Defending Entra ID Against Device Code Flow Abuse
A practical security checklist for defending Microsoft Entra ID and Microsoft 365 environments against RFC 8628 OAuth device code phishing and token capture att…
SAML Key Rotation Failures: Certificate Fingerprints and Domain Matching
Key rotation in multi-tenant SAML SSO often breaks authentication due to split-brain domain routing and certificate fingerprint caching.
Entra CVSS 10.0: Audit Your Tenant After CVE-2026-69836
Microsoft patched a CVSS 10.0 deserialization RCE in Entra. No customer package to install. Your tenant still needs an audit of grants, secrets, and admin roles…