
CVE-2026-109469 rated CVSS 10 in Entra device registration
The captured page is site navigation and does not describe impact, versions, exploitation, or a fix.
1
3 stories, newest first · one card per story

The captured page is site navigation and does not describe impact, versions, exploitation, or a fix.
Huntress details Knight Office, a new AiTM phishing kit stealing Microsoft 365 session tokens and registering attacker-controlled devices.

Wiz details how adversaries use realistic device names in Entra ID registrations to evade detection and which behavioral signals still expose them.
Today 1.6K readers · 2.4K views · 775 reads · all time 189K views