{"id":244705,"date":"2026-10-01T01:28:37","date_gmt":"2026-10-01T06:28:37","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/10\/microsoft-to-block-entra-id-script-injection-attacks-starting-october"},"modified":"2026-10-01T01:28:37","modified_gmt":"2026-10-01T06:28:37","slug":"microsoft-to-block-entra-id-script-injection-attacks-starting-october","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/10\/microsoft-to-block-entra-id-script-injection-attacks-starting-october","title":{"rendered":"Microsoft to block Entra ID script injection attacks starting October"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/microsoft-to-block-entra-id-script-injection-attacks-starting-october.jpg\"><\/a><\/p>\n<p>Microsoft has reminded customers that the Entra ID identity and access management (IAM) solution will get better protection against external script injection attacks starting next month.<\/p>\n<p>The company first revealed plans to secure Entra ID sign-ins from script injection attacks in a <a href=\"https:\/\/www.bleepingcomputer.com\/news\/microsoft\/microsoft-to-secure-entra-id-sign-ins-from-external-script-injection-attacks\/\" target=\"_blank\" rel=\"nofollow noopener\">November 2025 announcement<\/a>.<\/p>\n<p>According to a Monday message center update seen by BleepingComputer, Microsoft will begin enforcing additional Content Security Policy (CSP) defenses that will only allow scripts from trusted Microsoft content delivery network (CDN) domains during Entra ID sign-ins.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft has reminded customers that the Entra ID identity and access management (IAM) solution will get better protection against external script injection attacks starting next month. The company first revealed plans to secure Entra ID sign-ins from script injection attacks in a November 2025 announcement. According to a Monday message center update seen by BleepingComputer, [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31,1492],"tags":[],"class_list":["post-244705","post","type-post","status-publish","format-standard","hentry","category-policy","category-security"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/244705","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=244705"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/244705\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=244705"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=244705"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=244705"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}