#Entra ID
All CosmicBytez Labs articles tagged #Entra ID, across news, security advisories, how-to guides, and projects.
- News
Microsoft Reminds Admins to Migrate Entra ID Users to Passkeys Before SMS Retirement
Microsoft is retiring SMS first-factor sign-in for Entra ID on February 1, 2027, and is urging admins to move users to passkeys now.
- News
Microsoft Entra ID CVSS 10.0 Flaw Exploited in Wild, Allows Remote Code Execution
Microsoft warns of a CVSS 10.0 RCE flaw in Entra ID (CVE-2026-69836) exploited in the wild. No customer action required — Microsoft patched it server-side.
- News
Fortune 500 Companies Hit in Azure Data Theft Campaign
Threat actor TheHatman exposed 3.5M+ enterprise records from McDonald's, Vodafone, and TCS via infostealer-driven Azure Entra ID credential theft.
- News
Breach at the Beach: Play the Ultimate Entra ID CTF
Varonis has launched Breach at the Beach, a free hands-on Capture the Flag competition designed to teach defenders how attackers abuse Microsoft Entra ID...
- News
ConsentFix v3 Automates Azure OAuth Abuse With Mass
A new iteration of the ConsentFix attack toolkit has surfaced on cybercriminal forums, adding automation and scaling capabilities to OAuth consent...
- News
Microsoft to Roll Out Entra Passkeys on Windows in Late
Microsoft is rolling out passkey support for phishing-resistant passwordless authentication to Microsoft Entra-protected resources from Windows devices...
- Checklist
Microsoft 365 Tenant Security Checklist
Comprehensive security checklist for Microsoft 365 and Entra ID tenants — Conditional Access policies, MFA enforcement, audit logging, DLP configuration,...
- HOWTO
Microsoft Entra PIM: Configuring Just-in-Time Admin Access
Step-by-step guide to deploying Microsoft Entra Privileged Identity Management (PIM) for just-in-time role activation, approval workflows, access reviews,...
- HOWTO
Microsoft 365 Security and Compliance Configuration Guide
Harden your Microsoft 365 tenant with security baselines, conditional access policies, data loss prevention, audit logging, and compliance configurations...
- Project
Microsoft 365 Security Baseline Implementation
Implement a comprehensive security baseline for Microsoft 365 tenants covering identity protection, email security, endpoint management, data governance,...
- HOWTO
Conditional Access Policies: Zero Trust with Entra ID
Implement Zero Trust security with Microsoft Entra ID Conditional Access. Covers named locations, device compliance, risk-based policies, and...