Source: thehackernews.com – Author: .
New research has uncovered continued risk from a known security weakness in Microsoft’s Entra ID, potentially enabling malicious actors to achieve account takeovers in susceptible software-as-a-service (SaaS) applications.
Identity security company Semperis, in an analysis of 104 SaaS applications, found nine of them to be vulnerable to Entra ID cross-tenant nOAuth abuse.
First disclosed by
Original Post url: https://thehackernews.com/2025/06/noauth-vulnerability-still-affects-9-of.html
Category & Tags: –
Views: 1
