Proofpoint details BluePhishing attack on Microsoft Entra agent identities
One admin consent can create persistent agent identities; Proofpoint reports no observed real-world use.
Stories per day · 30 days
2 RSS
Relatedagentic-ai1agent-identity1claude1consent-phishing1credentials1entra-agent-id1github1non-human-identity1oauth1open-source1proofpoint1tenable1uk-government1
15 stories, newest first · one card per story
Stories tagged #microsoft-entra
Researcher finds serious flaws in public UK government code
A Planning Inspectorate GitHub commit left Microsoft Entra ID credentials that could have reached SharePoint, OneDrive and legal-hold files.
1
Tenable One inventories Microsoft Entra Agent ID identities
Tenable says conventional IAM can miss Entra’s four-object agent model, including blueprints that span tenants.
3
12 Best IGA Tools Compared (2026): Features & Pricing
A 2026 buyer's guide ranks SailPoint the top identity governance platform, with Saviynt and Entra ID Governance close behind.
TrustSink Attack Uses Rogue MFA Provider to Steal Microsoft Entra Passwords During Legitimate Logins
Varonis disclosed TrustSink, a post-compromise Entra technique that steals passwords via a rogue MFA provider.
2
Top 10 Best Adaptive / Risk-Based Authentication Tools in 2026 [Ranked & Scored]
A 2026 ranking scores ten adaptive authentication tools, placing Microsoft Conditional Access first.
2
Top 10 Best Decentralized Identity Solutions in 2026 [Ranked & Scored]
Rankings of top 10 decentralized identity solutions highlight Microsoft Entra Verified ID for enterprise reach amid a rapidly consolidating market.
3
12 Best MFA Solutions Compared (2026): Features & Pricing
Comparative analysis ranks 12 MFA solutions, highlighting Cisco Duo for transparency and Microsoft Entra MFA for M365 integration amid rising phishing threats.
2
Rogue external MFA providers can steal passwords during logins
Varonis 'TrustSink' shows attackers with privileged Entra access can register rogue external MFA providers to harvest plaintext passwords during logins.
1
Top 10 Best Multi-Factor Authentication (MFA) Solutions in 2026 [Ranked & Scored]
Editorial ranking scores ten 2026 MFA solutions, placing Microsoft Entra MFA first on bundled economics and phishing resistance.
Top 10 Best Single Sign-On (SSO) Solutions in 2026
Editorial buyer's guide ranks ten 2026 SSO solutions, naming Entra ID the bundled default and Okta the neutral catalog leader.
3
Top 10 Best Identity Governance & Administration (IGA) Tools in 2026
Editorial ranking of ten 2026 IGA tools places SailPoint first, with Saviynt and Microsoft Entra ID Governance close behind.
GhostCode Abuses Microsoft Entra Device Enrollment to Maintain Access After Token Revocation
eSentire exposes GhostCode, a device-code phishing kit that abuses Microsoft Entra device enrollment to persist even after stolen tokens are revoked.
9
.webp&w=828&q=75)
12 Best CIEM Tools Compared (2026): Features & Pricing
Buyer's guide compares twelve CIEM tools; Microsoft discontinued Entra Permissions Management, while Tenable (Ermetic), CyberArk, and Wiz lead the 2026 scorecard.
4
Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18)
Unit 42 reports actor TheHatman claims large-scale theft of Microsoft Entra credentials and provides mitigation guidance for credential attacks.
1