41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a0876d-3f51-734b-b4e4-977e9e2fdaf2

One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens

dirkjanm.io · published 17 September 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at dirkjanm.io Wayback capture

1blogs citing

First cited: 11 Aug 2026
Most recent: 24 Aug 2026
Rank this month: not ranked
Links from this post: 4
Words captured: 3,696

Cited by

Blog

In the post

Date

ERNW Insinuator

Token Theft in Microsoft Entra ID (Part 1 of 4): Threat Landscape and Attack Techniques Read at the source ↗

24 Aug 2026

ERNW Insinuator

#TROOPERS26 AD & Entra ID Security Track Read at the source ↗

11 Aug 2026

Links from this post

Link

Host

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55241

msrc.microsoft.com

https://github.com/dirkjanm/ROADtools

github.com

https://www.microsoft.com/en-us/security/blog/2025/07/08/enhancing-microsoft-365-security-by-eliminating-high-privilege-access/

microsoft.com

Azure AD privilege escalation - Taking over default application permissions as Application Admin Read at the source ↗