
The emergence of the nOAuth flaw has spotlighted a critical security vulnerability in Microsoft’s Entra ID, posing a significant threat to thousands of software-as-a-service (SaaS) applications even though the flaw was discovered two years ago. This vulnerability, highlighted by Semperis at the TROOPERS25 conference, threatens roughly 15,000 SaaS applications that remain exposed to unauthorized access and data breaches. Initially identified