New Vulnerability in Entra ID: Users were able to change their own Username
Another Microsoft security vulnerability became known over the past week. It was possible for users and, under certain conditions, external users (guests) to change their so-called "User Principal Name (UPN)." The UPN is the primary sign-in attribute used in the Microsoft world to determine identity. The Bypass of Intune Compliant Device controls is also still... » read more