July 17, 2025; CVSS 10.0 Entra ID bug via legacy Graph enabled cross-tenant impersonation risking tenant compromise.

"Since the Azure AD Graph API is an older API for managing the core Azure AD / Entra ID service, access to this API could ...

Ongoing Akira ransomware attacks targeting SonicWall SSL VPN devices continue to evolve, with the threat actors found to be successfully authenticating despite OTP MFA being enabled on accounts.

“Fundamentally, the issue that leads to Kerberoasting is bad passwords,” Tim Medin, the researcher who coined the term ...

Microsoft recently patched a critical security vulnerability in its Entra ID system. The flaw, tracked as CVE-2025-55241, could have been exploited to take control of any ...

Known as Entra ID, the system stores each Azure cloud customer’s user identities, sign-in access controls, applications, and ...

Though patched, the flaw underscores systemic risks in cloud identity systems where legacy APIs and invisible delegation ...

There are three active cases of tuberculosis in Maine as of this week as TB continues to increase across the country, the Maine Center for Disease Control and Prevention reported, according to the ...

Three people in Maine have been infected with active tuberculosis, the world’s deadliest disease, according to health officials who raised alarms Friday. There was no connection between the three ...

WASHINGTON – President Donald Trump says he was aware of concerns about his health over the weekend but hadn't realized how dire the speculation had become. Trump's public absence fueled online ...

As students arrive back on college campuses for the fall semester, a nefarious aspect of online anonymity is coming with them: a slew of universities are falling victim to hoaxes involving active ...