👩‍💻 Creating immutable users through a bug in Entra ID restricted administrative units

Imagine trying to disable a malicious user in your Azure environment, only to find it can't be modified! Datadog recently identified a timing-based bug in Entra ID's restricted administrative units (AUs) that could have allowed just this scenario to occur.

https://securitylabs.datadoghq.com/articles/creating-immutable-users-entra-id-administrative-units/

#azure