Microsoft tightens cloud login process to prevent common attack

Microsoft is tightening its cloud platform’s login system to make it harder for hackers to hijack users’ accounts.

Beginning next October, Microsoft’s Entra ID cloud identity management platform will block scripts from running during the login process unless they originate from “trusted Microsoft domains,” the company said on Monday.

“This is a proactive measure that further shields your users against current security risks, such as cross-site scripting (XSS), where attackers can insert malicious code into websites,” Ankur Patel, an Entra ID product manager, wrote in a blog post.

The change is part of Microsoft’s Secure Future Initiative, which the company announced after a series of…