Beware the Hidden Risk in Your Entra Environment The Hacker [email protected] (The Hacker News)

If you invite guest users into your Entra ID tenant, you may be opening yourself up to a surprising risk. 
A gap in access control in Microsoft Entra’s subscription handling is allowing guest users to create and transfer subscriptions into the tenant they are invited into, while maintaining full ownership of them. 
All the guest user needs are the permissions to create subscriptions in If you invite guest users into your Entra ID tenant, you may be opening yourself up to a surprising risk. 
A gap in access control in Microsoft Entra’s subscription handling is allowing guest users to create and transfer subscriptions into the tenant they are invited into, while maintaining full ownership of them. 
All the guest user needs are the permissions to create subscriptions in 

​Read More