As of September 7, 2026, Microsoft Entra ID has terminated the use of unregistered directory contact data for self-service password reset (SSPR). This SSPR retirement means mobile numbers, business ...
CVE-2026-85695 (CVSS 9.4), and CVE-2026-85620 (CVSS 9.2) all shipped this week without default authentication. Add Microsoft’s September 3 batch – nine identity CVEs, two at CVSS 10.0 – and the ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results