‘High-severity’ Microsoft Exchange vulnerability disclosed on heels of Black Hat talk

The vulnerability (CVE-2025-53786) allows attackers to manipulate user credentials, escalate privileges, and impersonate hybrid users. It also exposes Entra ID, potentially compromising cloud-based identity services.