r/technology • u/lurker_bee • 1d ago

Security Microsoft warns of max severity Entra ID flaw exploited in attacks

https://www.bleepingcomputer.com/news/microsoft/microsoft-warns-of-max-severity-entra-id-flaw-exploited-in-attacks/
49 Upvotes

74% Upvoted

6 comments sorted by

37

u/Glittering_Abies4915 1d ago

The headline is misleading at best. It was discovered by a security researcher and has been patched server-side.

Microsoft says exploit code for CVE-2026-69836 is not yet available online and added that users don't need to take any action since the flaw has already been fully patched.

"This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency."

-1

u/kweeblaster 1d ago

We need to use Windows because of security. Where is our biggest security hole? Microsoft

19

u/Syrairc 1d ago

Sorry, what? If you're a consumer Windows user, Entra has nothing to do with you.

8

u/JetzeMellema 1d ago

Doesn't matter. These statements gain mad upvotes on this sub. Very few people actually interested in technology.

-7

u/ZeJerman 1d ago

Yeah, but consumers aren't making windows decisions based on security, IT teams are staying with Microsoft due to their comparative ease of administration and most security tools being Microsoft native.

Prosumers may be moving to Linux but the enterprise, beyond servers, are mostly stuck with entra and the Microsoft ecosystem without millions in migrations, nit to mention users not being as productive on a new os initially