Post
Hackmanac
hackmanac.com
did:plc:ntxklgzhav3ilrmci2it5dux
🚨Microsoft Entra ID flaw allowed hijacking any company's tenant Microsoft Entra ID flaw (CVE-2025-55241) could have let attackers gain Global Admin access to any tenant worldwide using undocumented “actor tokens” from the legacy Access Control Service with the deprecated Azure AD Graph
2025-09-22T06:02:17.604Z