One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens
2 comments · security
- Comments2
–Rank now
#8Peak rank
1Days on list
–Score · 7d
Oct 30, 2026First seen
On Lobsters
security
- Score
- 9
- Comments
- 2
- Submitted by
- loldot
- Tags
- security
- Site
- dirkjanm.io
Story details from Lobsters ↗ · linked article on dirkjanm.io.
Trending history
One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens was first seen on Lobsters · Hottest on Oct 30, 2026. Since then it has appeared in 1 check on 1 different day. Its best position was #8 of 25, reached on Oct 30, 10:19 UTC. It dropped off the list after Oct 30, 10:19 UTC.
Rank history
Position on Lobsters · Hottest at every check (lower is better).
Last 14 days
Best rank per day (UTC).
8
Oct 26today
From the discussion
A few top-level comments from Lobsters, shortened. Read the full thread on Lobsters.
This bug is so extremely bad. Another demonstration of the perils of putting all the world's IT departments in a single bucket.
I literally cannot think of any bug in Azure that would have higher impact. We can only hope that Dirk was the first to discover it and not some nation state adversary - with the lack of logging from token creation it is going to be really hard to find out if you have any dormant threats in your entra id directory now.
Featured in
Archived daily, weekly and monthly lists that include this entry.
Lobsters 1 day, best #8
Questions
Is One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens trending on Lobsters right now?
Not at the moment. It was last on the list on Oct 30, 10:19 UTC, after 1 day of trending.
What is the highest rank One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens reached?
#8 on Lobsters · Hottest, on Oct 30, 10:19 UTC. Trendoday checks this list every 30 minutes.
How long has One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens been trending?
It was first seen on Oct 30, 2026 and has been on the list on 1 day (1 check) since.