Over 50,000 Azure AD Users’ Access Tokens Exposed via Unauthenticated API Endpoint

vm_adminJune 2, 2025

CloudSEK’s BeVigil platform has uncovered a critical security vulnerability affecting an aviation giant, where an exposed JavaScript file containing an unauthenticated API endpoint led to unauthorized access to Microsoft Graph tokens with…

Article Source
https://gbhackers.com/over-50000-azure-ad-users-access-tokens-exposed/

Facebook
Twitter
Pinterest
LinkedIn
Digg
Tumblr
Reddit
Buffer
Blogger
Newsvine
HackerNews
Flipboard
Share
LiveJournal
Yammer
Mix
Instapaper
Copy Link
Mastodon

Related Posts