// Microsoft AzureCRITICAL
Microsoft disclosed nine vulnerabilities on September 3, 2026, affecting Azure services including Azure AD B2C, Azure AI Language Authoring, and Entra ID, with two CVEs rated CVSS 10.0. The flaws involve authorization bypasses and authentication failures in identity infrastructure mediating 600 million daily identity attacks. Microsoft applied server-side mitigations in production; no customer patching required but defense-in-depth measures are advised.
// Get alerts for Microsoft Azure