Benjamin Sonntag-King
boosted
« Recently, security researcher Dirk-Jan Mollema disclosed CVE-2025–55241, a vulnerability so catastrophic that it reads like fiction : a single token, obtained from any test tenant, could have granted complete administrative control over every Microsoft Entra ID (Azure AD) tenant in the world. Every. Single. One. »
› https://tide.org/blog/god-mode-vulnerability-microsoft-authorityless-security