InsightCybersecurity
Weekly bulletin highlights Entra ID RCE, MFA bypass campaign, and BEC fraud
A cybersecurity bulletin reported a critical Entra ID remote-code-execution flaw, a Microsoft 365 session-hijacking campaign that bypassed MFA after authentication, and a separate business email compromise attack that drained vendor payments. These incidents are relevant to zero-trust and fraud risks affecting platform security.
CybersecurityNewsRead at source ↗