MICROSOFT TO BLOCK ENTRA ID SCRIPT INJECTION ATTACKS STARTING OCTOBER

Summary from the TLDR InfoSec newsletter

Starting in mid-October, Microsoft Entra ID will enforce a Content Security Policy that permits only Microsoft CDN-hosted scripts on browser sign-in pages at login.microsoftonline.com.