Microsoft Patches Entra ID Role Flaw That Enabled Service Principal Takeover

Microsoft has patched a vulnerability in its Entra ID platform where the Agent ID Administrator role could be exploited for privilege escalation and identity takeover attacks, as reported by cybersecurity firm Silverfort. The flaw, related to AI agent identity lifecycle management, highlights risks in administrative roles within identity platforms.