Curated security research, vulnerabilities, advisories and tools for practitioners.

#azure-ad

Security coverage tagged azure-ad.

1.

Critical auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validation

vulnerability | Critical | 2026-04-10 07:36 | CVE-2026-2628 | yeswehack.com | original ↗ | #cloud | #authentication-bypass | #wordpress

2.

2025 Red Team Tools – Cloud & Identity Exploitation, Evasion & Developer Libraries

blog | 2025-06-18 00:00 | bishopfox.com | original ↗ | #cloud | #cloud-security | #identity-security

3.

A New App Consent Attack: Hidden Consent Grant

blog | 2024-08-13 17:41 | semperis.com | original ↗ | #cloud | #vulnerability-research | #privilege-escalation

4.

Identity Attack Watch: AD Security News, July 2023

blog | 2023-07-31 14:57 | semperis.com | original ↗ | #cloud | #active-directory | #ransomware

5.

Identity Attack Watch: AD Security News, June 2023

incident | 2023-06-30 00:01 | semperis.com | original ↗ | #cloud | #zero-day | #active-directory

6.

Semperis Recovery for Azure AD: Protecting Critical Resources

blog | 2023-05-25 02:13 | semperis.com | original ↗ | #cloud | #cloud-security | #entra-id

7.

Azure Active Directory Security: 5 Ways to Secure Your AD

blog | 2023-03-30 00:27 | semperis.com | original ↗ | #cloud | #threat-detection | #compliance

8.

Organizations Prioritize ITDR Solutions That Protect Active Directory Before, During, and After a Cyberattack

blog | 2022-09-13 15:22 | semperis.com | original ↗ | #cloud | #active-directory | #identity-security

9.

SMTP Matching Abuse in Azure AD

blog | 2022-08-30 00:01 | semperis.com | original ↗ | #cloud | #active-directory | #privilege-escalation

10.

Securing Hybrid Identity

blog | 2022-08-04 03:05 | semperis.com | original ↗ | #cloud | #mfa | #azure-ad

11.

Hybrid Identity Protection with Dr. Nestori Synnimaa

blog | 2022-07-21 18:45 | semperis.com | original ↗ | #cloud | #active-directory | #identity-security

12.

Purple Knight Introduces Entra ID (formerly Azure AD) Security Indicators

blog | 2022-07-07 01:00 | semperis.com | original ↗ | #cloud | #active-directory | #entra-id

13.

Hybrid Identity Protection: IAM Expert Daniel Stefaniak

blog | 2022-05-27 15:10 | semperis.com | original ↗ | #cloud | #identity-security | #mfa

14.

New Azure AD Security Indicators Help Protect Hybrid Identity Environments

blog | 2022-04-21 17:52 | semperis.com | original ↗ | #cloud | #cloud-security | #active-directory

15.

Identity Attack Watch: January 2022

incident | 2022-01-28 17:06 | semperis.com | original ↗ | #cloud | #active-directory | #mfa

16.

Time to Leave ADFS Behind for Authenticating in Hybrid Environments?

blog | 2021-07-08 19:28 | semperis.com | original ↗ | #cloud | #active-directory | #authentication

17.

Top Security Risks to Watch for in Shifting to Hybrid Identity Management

blog | 2021-02-19 14:55 | semperis.com | original ↗ | #cloud | #cloud-security | #active-directory

18.

Your Zero Trust Strategy Depends on Active Directory Integrity

blog | 2020-05-11 21:53 | semperis.com | original ↗ | #cloud | #active-directory | #identity-security

19.

Retake Control of Attribute Sync to Azure AD

blog | 2018-10-02 12:00 | semperis.com | original ↗ | #cloud | #data-exposure | #identity-security

20.

Two New Microsoft Hybrid Services Dramatically Simplify Connecting your Active Directory to Azure

blog | 2017-01-10 22:24 | semperis.com | original ↗ | #cloud | #microsoft | #azure-ad

21.

Using AD FS To Change Your AD Password Anywhere, Anytime

blog | 2016-10-25 12:10 | semperis.com | original ↗ | #cloud | #active-directory | #self-service

22.

Understanding Azure AD Password (Hash) Sync

blog | 2016-08-09 19:06 | semperis.com | original ↗ | #cloud | #authentication | #explainer

23.

When you should use Azure MFA and when you should use MFA Server

blog | 2016-07-19 15:04 | semperis.com | original ↗ | #cloud | #licensing | #azure-ad

24.

Microsoft upends traditional password recommendations with significant new guidance

blog | 2016-07-11 14:20 | semperis.com | original ↗ | #cloud | #microsoft | #identity-security

25.

Hidden Gems: The Azure Active Directory Whitepapers

blog | 2016-06-27 13:19 | semperis.com | original ↗ | #cloud | #active-directory | #documentation

26.

SaaS Passwords Are Like Cockroaches

blog | 2016-02-28 03:07 | semperis.com | original ↗ | #cloud | #saas | #passwords

27.

Azure AD Connect: the staging server

blog | 2015-10-20 16:34 | semperis.com | original ↗ | #cloud | #high-availability | #azure-ad

28.

Why On-Premises Active Directory Still Matters in a Cloud-Connected World

blog | 2015-09-20 17:51 | semperis.com | original ↗ | #cloud | #active-directory | #azure-ad

29.

Azure Active Directory vs. Active Directory Domain Services

blog | 2013-12-17 15:26 | semperis.com | original ↗ | #cloud | #active-directory | #kerberos