Microsoft warns of max severity Entra ID flaw exploited in attacks

What happened

Microsoft has patched a maximum-severity vulnerability in the Entra ID identity and access management (IAM) platform that has been exploited in attacks. [...]

Why it matters

The incident may affect operational continuity, asset safety or trust around Microsoft. Watch for verified scope and remediation.

Affected entities

View evidence

2 reports · 1 original report · 2 independent

1. BleepingComputerPrimary source · Supports · EN · 100%
   Microsoft warns of max severity Entra ID flaw exploited in attacks ↗Aug 21, 2026, 7:04 AM
2. The Hacker NewsIndependent · Supports · EN · 100%
   Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution ↗Aug 21, 2026, 2:06 AM

Claims

• Microsoft warns of max severity Entra ID flaw exploited in attacks Observed

Conflicts

No material conflict detected in the available evidence.

Timeline

1. August 21, 2026 at 2:06 AMFirst reported
2. Aug 21, 2026, 8:21 AMCorroborated · 81/71%

Market move following event

Market reaction is not yet available for this asset and time window.

Score explanation