WIDESPREAD MICROSOFT ENTRA LOCKOUTS TIED TO NEW SECURITY FEATURE ROLLOUT

Summary from the TLDR InfoSec newsletter

On Saturday, Windows admins from numerous organizations reported widespread account lockouts triggered by false positives in the rollout of Microsoft Entra ID's new MACE leaked credentials detection app. Microsoft notified users that the alarms were not caused by actual breaches but rather the invalidation of user refresh tokens that were mistakenly logged into their systems.