Dirk-jan Mollema personal blog
One Token to rule them all – Obtaining Global Admin in every Entra ID tenant
While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful Entra ID vulnerability that I will probably ever find. One that could have allowed me to compromise every Entra ID tenant in the world (except probably those in national cloud deployments). If you are an Entra ID admin…
- Points
- 331
- HN comments
- 51
- Submissions
- 1
- Cited by
- 4 commenters
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Sep 17, 2025 | One Token to rule them all – Obtaining Global Admin in every Entra ID tenant by colinprince | 331 | 51 |
Cited in comments
Linked from 4 Hacker News comments by 4 different people, from Oct 2025 to Jul 2026.
Most recent:
- ultra2d · Jul 30, 2026
- pluralmonad · Nov 21, 2025
- blibble · Nov 5, 2025
- karlkloss · Oct 1, 2025
