996 - Falha no Entra ID permitia sequestro de identidades privilegiadas

Cyber Morning Call · Apr 28, 2026 · 7m

Referências do Episódio

WEBINAR TEMPEST: Superfície exposta, acesso concedido: como ativos esquecidos formam o caminho perfeito para o atacante

Microsoft Patches Entra ID Role Flaw That Enabled Service Principal Takeover

Agent ID Administrator scope overreach: Service Principal takeover in Entra ID

CVE-2026-25874: Hugging Face LeRobot Unauthenticated RCE via Pickle Deserialization

CVE-2026-42208: Targeted SQL injection against LiteLLM's authentication path discovered 36 hours following vulnerability disclosure

Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 Malware…