April 28, 2026
Microsoft patched a critical Entra ID role assignment flaw that let attackers take over service principals. Here's what developers need to know now.