MICROSOFT TO SECURE ENTRA ID SIGN-INS FROM SCRIPT INJECTION ATTACKS

Summary from the TLDR InfoSec newsletter

Microsoft will implement a strengthened Content Security Policy for Entra ID by October 2026 that blocks external script injection and cross-site scripting attacks.