Microsoft Entra account lockouts caused by user token logging mishap

Microsoft Entra account lockouts caused by user token logging mishap

Microsoft confirms that the weekend Entra account lockouts were caused by the invalidation of short-lived user refresh tokens that were mistakenly logged into internal systems.

Microsoft Entra ID Lockouts After MACE App Flags Legit Users

Was your Microsoft Entra ID account locked? Find out about the recent widespread lockouts caused by the new MACE Credential Revocation app.

With Entra ID, refresh tokens of numerous users have been accidentally logged. Microsoft has locked out affected persons from security reasons. (Cloud services, Microsoft)

Attackers have accessed Microsoft NTLM hashes and used them for authentication. For example, CISA warns against this.

Microsoft Addresses Entra ID Token Logging Issue, Alerts to Protect Users

Microsoft has acknowledged a recent issue that triggered widespread alerts in its Entra ID Protection system, flagging user accounts as high risk due to supposed credential leaks on the dark web. The alerts have been attributed to a combination of… Read more → The post Microsoft Addresses Entra ID Token Logging Issue, Alerts to Protect Users appeared first on IT Security News.