Event JSON
{
"id": "2c71e8120e41785e68080722db098115820d2750d82a98e2ee6023b9e077a5b7",
"pubkey": "fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd",
"created_at": 1758132045,
"kind": 1,
"tags": [
[
"proxy",
"https://cyberplace.social/@GossiTheDog/115220941705031025",
"web"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/115220941705031025",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://cyberplace.social/users/GossiTheDog/statuses/115220941705031025",
"pink.momostr"
],
[
"-"
]
],
"content": "Dirk-jan Mollema, who discovered Zerologon (the most impactful on prem Active Directory vulnerability ever), has discovered an Azure Active Directory (EntraID) vulnerability which allowed anybody to take over any tenant - access any Microsoft 365 resource, basically. CVE-2025-55241\n\nhttps://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/",
"sig": "d06d3d06a60b934eb9a54791998de2c3cd092e9bdf927a12c2361af7de5fdbc22ed61ec7589fcc9b7300f68a5d872757173e36a97f305c9338511198d2362712"
}
