Critical Microsoft Entra ID Flaw Could Allow Global Admin Impersonation

A critical token validation vulnerability in Microsoft Entra ID (formerly Azure Active Directory) could have enabled attackers to impersonate any user—including Global Administrators—across any tenant. Tracked as CVE-2025-55241, the flaw carries a ma...