Microsoft patches critical Entra ID vulnerability exploited in active attacks

Microsoft has released a patch for a maximum-severity vulnerability in its Entra ID platform that threat actors have actively exploited. The scope of the compromise and the specific identity of the attackers remain unconfirmed, posing significant risks to enterprise authentication security.