Microsoft Patches Entra ID Flaw as Stripe Leak Hits 659 Merchants

Microsoft Entra ID is a central identity and access-management service used by organizations to control cloud accounts, authentication and permissions. A critical weakness in that layer can give attackers a path into wider corporate systems. The exposure of merchant credentials on payments platform Stripe separately highlights how poorly protected third-party keys can turn into a supply-chain risk affecting customer payment information.

A cybersecurity report published Aug. 24 said Microsoft issued an update for a maximum-severity Entra ID vulnerability that posed a remote-code-execution risk. In a separate incident, keys belonging to 659 merchants using Stripe were exposed, leading to the disclosure of a large volume of customer payment data. HITCON, the Taiwan-based hacker conference, also put offensive and defensive security involving AI agents at the center of its agenda.