Azure AD Archives • Daily CyberSecurity

The “Accidental” Breach: How a Misconfigured Endpoint Led to a Major SharePoint Data Leak Spring Boot Actuator Malware-less Attack

The “Accidental” Breach: How a Misconfigured Endpoint Led to a Major SharePoint Data Leak

Do Son March 23, 2026

A recent investigation by Trend Micro has revealed a case study where a devastating data exfiltration incident...

Critical ABB Alert: OPTIMAX Flaw Allows Full System Takeover ABB T-MAC Plus vulnerabilities terminal system flaws ABB OPTIMAX Vulnerability CVE-2025-14510 ABB Edgenius Auth Bypass, Critical RCE ABB, ASPECT BMS CVE-2024-48841, CVE-2024-48849, and CVE-2024-48852 CVE-2024-48510

Critical ABB Alert: OPTIMAX Flaw Allows Full System Takeover

Do Son January 19, 2026

Industrial automation giant ABB has released a critical security advisory warning of a severe vulnerability in its...

Access Denied: Microsoft Authenticator to Purge Entra ID Credentials on Rooted Devices Microsoft Authenticator, Password Manager

Access Denied: Microsoft Authenticator to Purge Entra ID Credentials on Rooted Devices

Do Son November 4, 2025

According to Microsoft’s latest Microsoft Entra ID verification notice, beginning in February 2026, identity authentication for any...

CVE-2025-55241: Microsoft Entra ID Flaw with CVSS 10.0 Could Have Compromised Every Tenant Worldwide Microsoft Entra ID vulnerability CVE-2025-55241

Microsoft Entra ID vulnerability CVE-2025-55241

CVE-2025-55241: Microsoft Entra ID Flaw with CVSS 10.0 Could Have Compromised Every Tenant Worldwide

Do Son September 22, 2025

In one of the most significant discoveries of 2025, security researcher Dirk-jan Mollema revealed a vulnerability in...

The Master Key: Exposed JSON File Gives Attackers Full Control of Azure AD Azure AD, misconfiguration

The Master Key: Exposed JSON File Gives Attackers Full Control of Azure AD

Do Son September 2, 2025

Resecurity’s HUNTER Team uncovered a severe misconfiguration: sensitive Azure Active Directory (Azure AD) application credentials exposed in...

Aviation Industry Alert: 50,000+ Azure AD Records Exposed via Misconfigured API Azure AD, Data Exposure

Aviation Industry Alert: 50,000+ Azure AD Records Exposed via Misconfigured API

Do Son June 2, 2025

A serious data exposure incident in the aviation industry has been uncovered by CloudSEK’s BeVigil platform, revealing...