Qubole supply chain attack exposed AWS, Entra ID, and Okta credentials
From October 14 to October 26, stolen Qubole AWS credentials let an attacker assume roles in dozens of customer accounts.
Stories per day · 30 days
4 RSS
Relatedmicrosoft-3658connectwise5mfa4skykick4supply-chain4aitm3cloud-backup3oauth3passkeys3application-credentials2azure2device-code-phishing2inbox-rules2m3652microsoft2msp2okta2sim-swap2
41 stories, newest first · one card per story
Stories tagged #entra-id
Windows 11 26H2 turns settings backup on by default
Eligible devices back up supported settings and the Microsoft Store app list; restore still needs separate configuration.
1
Threat actors use agentic AI to scan GitHub for exposed secrets
Microsoft observed AI agents scanning repositories and abusing leaked credentials on Azure and Entra ID.
1
Hackers Use Stolen Microsoft Entra ID App Credentials to Breach 27 Organizations
Attackers authenticated as legitimate applications using stolen secrets to hit 27 organizations via MSPs.
Hackers abuse stolen Entra ID and Azure DevOps credentials to hit 27 organizations
Attackers abused stolen Microsoft Entra ID app credentials and Azure DevOps federated identities to reach 27 MSPs and their customers since November 1, 2026.
Microsoft will retire Entra ID SMS and voice sign-in in February 2027
Worldwide and GCC tenants must move telephone-only users to passkeys or another provider before February 1, 2027.
Microsoft urges Entra ID admins to replace SMS and voice with passkeys
Retirement of Microsoft-provided phone authentication starts February 1, 2027, in Worldwide and Government Community Cloud tenants.
Microsoft tells Entra ID admins to leave SMS and voice before 2027
Microsoft-provided SMS and voice MFA end February 1, 2027 for workforce tenants, not Azure AD B2C or Entra External ID.
Microsoft 365 token-replay campaign hit 97 accounts at 79 organizations
Huntress logged 497 successful sign-ins and 48 rogue Entra devices between July 14 and September 22, 2026.
1
Stolen Microsoft 365 sessions replayed at 79 organizations
Huntress counted 497 successful sign-ins and over 200,000 failures from July 14 to September 22, with inbox rules hiding mail.
1
M365 token spray and replay campaign hits 79 organizations
Huntress saw 497 successful sign-ins and more than 200,000 failed attempts from July 14 to September 22, 2026.
3
Stolen ConnectWise app credentials used against Microsoft 365 tenants
Seven application identities were disabled and Cloud Backup suspended; Huntress saw about 300 successful sign-ins.
2
ConnectWise disables cloud apps after Microsoft 365 tenant access
Seven application identities were disabled October 17; Huntress says a later wave against 16 tenants failed.
5
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
Hackers abused ConnectWise Cloud Backup identities to access at least 162 Microsoft 365 tenants.
7
Hackers used Compromised ConnectWise Backup Credentials to Hack 173 Microsoft 365 Accounts
Attackers used a stolen ConnectWise Cloud Backup secret to access 173 Microsoft 365 tenants.
7
ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks
Huntress says abused ConnectWise Cloud Backup credentials accessed at least 162 Microsoft 365 tenants.
3
AI Used in 84% of Ransomware Attacks as Identity Infrastructure Comes Under Fire.
Semperis survey of 1,200 ransomware victims finds AI in 84% of incidents and identity systems widely targeted.
3
12 Best Authentication-as-a-Service (AaaS) Providers Compared (2026): Features & Pricing
A 2026 comparison names Auth0 the leading authentication-as-a-service platform, with Entra External ID and Cognito as cheaper alternatives.
3
Session Cookie Vulnerability Lets Attackers Bypass Entra ID MFA and Impersonate Users
Resecurity found a yard-management app’s forged session cookies bypassed Entra ID MFA and impersonated users.
2
Authentication Bypass Successfully Impersonated 95 Users Without Passwords or MFA
Testers forged session cookies on a yard-management app and impersonated 95 users without passwords or MFA.
3
12 Best SSO Solutions Compared (2026): Features & Pricing
A 2026 comparison ranks 12 SSO platforms, favoring Microsoft Entra ID for Microsoft 365 and Okta for mixed SaaS.
Windows 11 26H2 Enables Settings Backup by Default for Eligible Devices
Windows 11 26H2 enables settings backup by default on eligible unconfigured Entra-joined commercial devices.
4
12 Best IAM Solutions Compared (2026): Features & Pricing
A 2026 buyer's guide ranks 12 IAM products, favoring Entra ID and Okta for workforce identity.
China-Linked TA419 Hackers Target US AI Policy Experts With Credential Phishing Attacks
China-linked TA419 used AiTM phishing to steal Microsoft 365 sessions from U.S. AI policy experts.