OAuth Device Code Phishing: Azure vs. Google Compared

Azure can yield very powerful tokens while Google limits scopes, reducing the blast radius. Register for Huntress Labs' Live ...
CRN

Microsoft’s Eight-Hour Azure Outage: 5 Things We’ve Learned So Far

Microsoft’s Azure Front Door issues appear related to a faulty configuration change that bypassed already in place safety validations.

HP pulls update that broke Microsoft Entra ID auth on some AI PCs

HP has pulled an HP OneAgent software update for Windows 11 that mistakenly deleted Microsoft certificates required for some ...
GitHub

ssoSilent fails in upcoming version of Chrome (142)

Version 142 (latest beta version) of chrome enables Local Network Access Restrictions [0] [1]. This breaks the ssoLogin function due to the following CORS error ...
GitHub

[Bug] MSAL Library not clearing the user access token from the iOS keychain upon calling RemoveAsync

In a .NET MAUI iOS application, calling RemoveAsync() on an account does not properly remove all associated tokens from the iOS keychain. While the method executes ...
Microsoft

Investigating active exploitation of CVE-2025-10035 GoAnywhere Managed File Transfer vulnerability

On September 18, 2025, Fortra published a security advisory regarding a critical deserialization vulnerability in GoAnywhere MFT’s License Servlet, which is tracked as CVE-2025-10035 and has a CVSS ...