{"id":24874,"date":"2025-09-20T05:58:59","date_gmt":"2025-09-20T05:58:59","guid":{"rendered":"https:\/\/www.stroople.com\/?p=24874"},"modified":"2026-06-02T11:05:18","modified_gmt":"2026-06-02T11:05:18","slug":"iam-cve-2025-55241-entra-id-vulnerability","status":"publish","type":"post","link":"https:\/\/www.stroople.com\/fr\/iam-cve-2025-55241-entra-id-vulnerability\/","title":{"rendered":"IAM : CVE-2025-55241 met en \u00e9vidence une faiblesse majeure dans Entra ID"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"24874\" class=\"elementor elementor-24874\" wpc-filter-elementor-widget=\"1\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-75a7e495 elementor-section-full_width elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"75a7e495\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-379ca332 syd-sticky-section-no\" data-id=\"379ca332\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-c67689e syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"c67689e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3b2c3dd elementor-section-full_width elementor-section-height-min-height elementor-section-items-stretch elementor-reverse-tablet elementor-section-height-default syd-sticky-section-no\" data-id=\"3b2c3dd\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-4002b263 syd-sticky-section-no\" data-id=\"4002b263\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4d0edb4 syd-sticky-section-no elementor-widget elementor-widget-ha-social-icons happy-addon ha-social-icons\" data-id=\"4d0edb4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"ha-social-icons.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"ha-social-icons-wrapper\">\n\t\t\t\t\t\t\t<a href=\"https:\/\/www.linkedin.com\/build-relation\/newsletter-follow?entityUrn=7120442855684231170\" class=\"ha-social-icon elementor-repeater-item-f2b3d32  elementor-social-icon-linkedin ha-social-icon--network\">\n\t\t\t\t\t<i class=\"fab fa-linkedin\"><\/i>\t\t\t\t<\/a>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-7af1deef syd-sticky-section-no\" data-id=\"7af1deef\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-1e11c0f0 syd-sticky-section-no elementor-widget elementor-widget-post-info\" data-id=\"1e11c0f0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"post-info.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-inline-items elementor-icon-list-items elementor-post-info\">\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-repeater-item-5b276ce elementor-inline-item\" itemprop=\"datePublished\">\n\t\t\t\t\t\t<a href=\"https:\/\/www.stroople.com\/fr\/2025\/09\/20\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text elementor-post-info__item elementor-post-info__item--type-date\">\n\t\t\t\t\t\t\t\t\t\t<time>20 septembre 2025<\/time>\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-42127c4d syd-sticky-section-no elementor-widget elementor-widget-theme-post-title elementor-page-title elementor-widget-heading\" data-id=\"42127c4d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"theme-post-title.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">IAM : CVE-2025-55241 met en \u00e9vidence une faiblesse majeure dans Entra ID<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-f87f821 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"f87f821\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-0e53a75 syd-sticky-section-no\" data-id=\"0e53a75\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-3deb2ab0 syd-sticky-section-no elementor-widget elementor-widget-theme-post-featured-image elementor-widget-image\" data-id=\"3deb2ab0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"theme-post-featured-image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"640\" height=\"400\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/boliviainteligente-wIBDrEv73xY-unsplash-2.jpg\" class=\"attachment-full size-full wp-image-24876\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/boliviainteligente-wIBDrEv73xY-unsplash-2.jpg 640w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/boliviainteligente-wIBDrEv73xY-unsplash-2-300x188.jpg 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/boliviainteligente-wIBDrEv73xY-unsplash-2-18x12.jpg 18w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/boliviainteligente-wIBDrEv73xY-unsplash-2-230x144.jpg 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/boliviainteligente-wIBDrEv73xY-unsplash-2-350x219.jpg 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/boliviainteligente-wIBDrEv73xY-unsplash-2-480x300.jpg 480w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ae97c8b syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"ae97c8b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-064f662 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"064f662\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-496d655 syd-sticky-section-no\" data-id=\"496d655\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-15e5835 syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"15e5835\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-02b8cb4 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"02b8cb4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4 style=\"font-weight: 400;\"><strong>Quand un simple jeton suffisait \u00e0 \u00e9branler la confiance dans le cloud<\/strong><\/h4><p style=\"font-weight: 400;\">Tout semblait ma\u00eetris\u00e9 dans les environnements Microsoft. MFA activ\u00e9, r\u00e8gles d\u2019acc\u00e8s conditionnel appliqu\u00e9es, journaux sans anomalies. Et pourtant, dans l\u2019ombre, une faille invisible dans Entra ID ouvrait la possibilit\u00e9 de devenir Global Admin dans n\u2019importe quel tenant. Pas de phishing, pas de mot de passe vol\u00e9. Juste un jeton sp\u00e9cial, mal valid\u00e9 par une API vieillissante, qui suffisait \u00e0 donner les pleins pouvoirs. Cette vuln\u00e9rabilit\u00e9, aujourd\u2019hui corrig\u00e9e et r\u00e9f\u00e9renc\u00e9e sous CVE-2025-55241, illustre combien l\u2019\u00e9difice de confiance des syst\u00e8mes IAM cloud peut reposer sur une simple erreur de conception.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-94434b5 syd-sticky-section-no\" data-id=\"94434b5\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-04dc3a0 syd-sticky-section-no elementor-widget elementor-widget-image\" data-id=\"04dc3a0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/elementor\/thumbs\/growtika-dUMEnARXgJU-unsplash-rbzx1pl4nramsl200y75ppch4jl16e2x1heqxyfuzk.jpg\" title=\"CVE Chrome\" alt=\"CVE Chrome\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-8e67fb7 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"8e67fb7\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-d6117cb syd-sticky-section-no\" data-id=\"d6117cb\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-10ca4bd syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"10ca4bd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4 style=\"font-weight: 400;\"><strong>Le c\u0153ur du probl\u00e8me : les Actor tokens<\/strong><\/h4><p style=\"font-weight: 400;\">Les Actor tokens sont des m\u00e9canismes internes de Microsoft, con\u00e7us pour permettre \u00e0 des services de d\u00e9l\u00e9guer des actions en toute transparence. Normalement invisibles pour les utilisateurs, ils fonctionnent comme des passe-partout dans l\u2019infrastructure.<\/p><p style=\"font-weight: 400;\">Le chercheur Dirk-jan Mollema a d\u00e9couvert que l\u2019Azure AD Graph API, en fin de vie mais encore utilis\u00e9e, ne validait pas correctement la provenance des Actor tokens. R\u00e9sultat : un attaquant pouvait g\u00e9n\u00e9rer un token dans son propre tenant de test, puis l\u2019utiliser pour se faire passer pour un administrateur global dans un tenant compl\u00e8tement diff\u00e9rent.<\/p><p style=\"font-weight: 400;\">Cette faille combinait deux erreurs : l\u2019existence d\u2019un m\u00e9canisme interne trop puissant et l\u2019absence de contr\u00f4le dans une API critique.<\/p><h4 style=\"font-weight: 400;\"><strong>Pourquoi cette vuln\u00e9rabilit\u00e9 est unique<\/strong><\/h4><p style=\"font-weight: 400;\">L\u2019exploitation ne d\u00e9clenchait aucun signal habituel. Pas de journalisation, pas de demande MFA, pas de r\u00e8gle d\u2019acc\u00e8s conditionnel. M\u00eame une organisation dot\u00e9e des meilleures pratiques IAM n\u2019aurait rien vu venir.<\/p><p style=\"font-weight: 400;\">Pour comprendre l\u2019ampleur du risque, il suffit d\u2019imaginer : un jeton g\u00e9n\u00e9r\u00e9 dans un tenant de test pouvait suffire \u00e0 prendre le contr\u00f4le d\u2019Exchange Online, de SharePoint, ou encore de ressources Azure sensibles dans une autre organisation. Sans traces directes, seuls des indices indirects (changement de r\u00f4les, nouveaux comptes, acc\u00e8s inhabituels) auraient pu alerter les d\u00e9fenseurs.<\/p><h4 style=\"font-weight: 400;\"><strong>Une vuln\u00e9rabilit\u00e9 r\u00e9v\u00e9latrice des failles IAM cloud<\/strong><\/h4><p style=\"font-weight: 400;\">CVE-2025-55241 est plus qu\u2019une simple CVE. C\u2019est un signal d\u2019alarme sur les m\u00e9canismes cach\u00e9s de confiance dans le cloud.<\/p><p style=\"font-weight: 400;\">Comme le rappelle Mitiga, Microsoft n\u2019est pas le seul concern\u00e9. Tous les grands fournisseurs \u2013 Google, AWS, Okta, Salesforce \u2013 utilisent des m\u00e9canismes internes de d\u00e9l\u00e9gation de service \u00e0 service. Ils sont rarement document\u00e9s et rarement audit\u00e9s, mais deviennent des armes parfaites lorsqu\u2019un d\u00e9faut de validation se glisse dans la cha\u00eene.<\/p><h4 style=\"font-weight: 400;\"><strong>Quels enseignements pour les organisations ?<\/strong><\/h4><p style=\"font-weight: 400;\">La faille a \u00e9t\u00e9 corrig\u00e9e rapidement par Microsoft d\u00e8s juillet 2025, et aucune exploitation n\u2019a \u00e9t\u00e9 confirm\u00e9e \u00e0 ce jour. Mais l\u2019absence de visibilit\u00e9 historique emp\u00eache de savoir si elle a \u00e9t\u00e9 utilis\u00e9e auparavant.<\/p><p style=\"font-weight: 400;\">Pour les professionnels de la cybers\u00e9curit\u00e9, la le\u00e7on est claire : ne pas se reposer uniquement sur les m\u00e9canismes natifs de l\u2019IAM cloud. La d\u00e9fense doit s\u2019appuyer sur la d\u00e9tection d\u2019anomalies post-exploitation. Cela implique de chasser les activit\u00e9s suspectes plut\u00f4t que d\u2019attendre un signal inexistant.\nLes SOC doivent apprendre \u00e0 corr\u00e9ler les indices faibles : cr\u00e9ations de comptes inattendues, r\u00f4les administratifs attribu\u00e9s sans justification, int\u00e9grations SaaS inhabituelles, ou d\u00e9ploiements soudains de nouveaux services.<\/p><h4 style=\"font-weight: 400;\"><strong>L'IAM au c\u0153ur du Cloud de confiance<\/strong><\/h4><p style=\"font-weight: 400;\">La vuln\u00e9rabilit\u00e9 CVE-2025-55241 restera comme l\u2019un des plus gros avertissements pour la s\u00e9curit\u00e9 des identit\u00e9s dans le cloud. Non pas parce qu\u2019elle a \u00e9t\u00e9 exploit\u00e9e, mais parce qu\u2019elle r\u00e9v\u00e8le une faiblesse structurelle : la d\u00e9pendance totale \u00e0 des m\u00e9canismes invisibles de d\u00e9l\u00e9gation.<\/p><p style=\"font-weight: 400;\">Pour les RSSI et responsables IAM, l\u2019enjeu est d\u00e9sormais d\u2019anticiper. La question n\u2019est pas <em>si<\/em> un nouveau d\u00e9faut de ce type sera d\u00e9couvert, mais <em>quand<\/em>.  La r\u00e9ponse doit \u00eatre une gouvernance IAM robuste, une visibilit\u00e9 accrue et une capacit\u00e9 de d\u00e9tection au-del\u00e0 des journaux classiques.<\/p><p style=\"font-weight: 400;\">\u00a0<\/p><p style=\"font-weight: 400;\"><strong>Source :<\/strong> Mitiga - <em>Breaking Down the Microsoft Entra ID Actor Token Vulnerability: The Perfect Crime in the Cloud<\/em><\/p><p style=\"font-weight: 400;\"><u><a href=\"https:\/\/www.mitiga.io\/blog\/breaking-down-the-microsoft-entra-id-actor-token-vulnerability-the-perfect-crime-in-the-cloud\">https:\/\/www.mitiga.io\/blog\/breaking-down-the-microsoft-entra-id-actor-token-vulnerability-the-perfect-crime-in-the-cloud<\/a><\/u><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0d45597 syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"0d45597\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-42f879c9 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"42f879c9\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-2c8bfc12 syd-sticky-section-no\" data-id=\"2c8bfc12\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6919a471 syd-sticky-section-no elementor-widget elementor-widget-heading\" data-id=\"6919a471\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Partager :<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-7f905bc1 syd-sticky-section-no\" data-id=\"7f905bc1\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-28b6f900 elementor-share-buttons--skin-flat elementor-share-buttons--view-icon-text elementor-share-buttons--shape-square elementor-grid-0 elementor-share-buttons--color-official syd-sticky-section-no elementor-widget elementor-widget-share-buttons\" data-id=\"28b6f900\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;share_url&quot;:{&quot;url&quot;:&quot;https:\\\/\\\/www.stroople.com\\\/iam-cve-2025-55241-entra-id-vulnerability&quot;,&quot;is_external&quot;:&quot;&quot;,&quot;nofollow&quot;:&quot;&quot;,&quot;custom_attributes&quot;:&quot;&quot;}}\" data-widget_type=\"share-buttons.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-grid\" role=\"list\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-grid-item\" role=\"listitem\">\n\t\t\t\t\t\t<div class=\"elementor-share-btn elementor-share-btn_x-twitter\" role=\"button\" tabindex=\"0\" aria-label=\"Partager sur x-twitter\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__icon\">\n\t\t\t\t\t\t\t\t<i class=\"fab fa-x-twitter\" aria-hidden=\"true\"><\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-share-btn__text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__title\">\n\t\t\t\t\t\t\t\t\t\tX\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-grid-item\" role=\"listitem\">\n\t\t\t\t\t\t<div class=\"elementor-share-btn elementor-share-btn_linkedin\" role=\"button\" tabindex=\"0\" aria-label=\"Partager sur linkedin\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__icon\">\n\t\t\t\t\t\t\t\t<i class=\"fab fa-linkedin\" aria-hidden=\"true\"><\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-share-btn__text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__title\">\n\t\t\t\t\t\t\t\t\t\tLinkedIn\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-cf1fb15 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"cf1fb15\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-12d5d76 syd-sticky-section-no\" data-id=\"12d5d76\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e19b717 syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"e19b717\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-eef88fd elementor-section-stretched elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"eef88fd\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;stretch_section&quot;:&quot;section-stretched&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-c0ccf91 syd-sticky-section-no\" data-id=\"c0ccf91\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-856e6fa ha-infobox-media-dir-left syd-sticky-section-no elementor-widget elementor-widget-ha-infobox happy-addon ha-infobox\" data-id=\"856e6fa\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"ha-infobox.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\n\t\t\t\t\t<figure class=\"ha-infobox-figure ha-infobox-figure--image\">\n\t\t\t\t<img decoding=\"async\" width=\"640\" height=\"427\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/a-c-fsy2bD7Pep8-unsplash.jpg\" class=\"elementor-animation-disable-animation attachment-medium_large size-medium_large wp-image-26068\" alt=\"Gestion de la surface d&#039;attaque externe et d\u00e9tection des fuites de donn\u00e9es\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/a-c-fsy2bD7Pep8-unsplash.jpg 640w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/a-c-fsy2bD7Pep8-unsplash-300x200.jpg 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/a-c-fsy2bD7Pep8-unsplash-18x12.jpg 18w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/a-c-fsy2bD7Pep8-unsplash-230x153.jpg 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/a-c-fsy2bD7Pep8-unsplash-350x234.jpg 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/a-c-fsy2bD7Pep8-unsplash-480x320.jpg 480w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/>\t\t\t<\/figure>\n\t\t\n\t\t<div class=\"ha-infobox-body\">\n\t\t\t<h2 class=\"ha-infobox-title\">Gestion de la surface d'attaque externe<\/h2>\n\t\t\t\t\t\t\t<div class=\"ha-infobox-text\">\n\t\t\t\t\t<p>Anticipez les attaques. D\u00e9couvrez ce que les cybercriminels savent d\u00e9j\u00e0 sur vous.<\/p>\n\t\t\t\t<\/div>\n\t\t\t\n\t\t\t<a class=\"ha-btn ha-btn--link\" href=\"https:\/\/www.stroople.com\/fr\/gestion-de-la-surface-dattaque-externe\/\"><span class=\"ha-btn-text\">En savoir plus<\/span><\/a>\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-33ef498 syd-sticky-section-no\" data-id=\"33ef498\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div data-ha-element-link=\"{&quot;url&quot;:&quot;https:\\\/\\\/www.stroople.com\\\/audit\\\/&quot;,&quot;is_external&quot;:&quot;&quot;,&quot;nofollow&quot;:&quot;&quot;}\" style=\"cursor: pointer\" class=\"elementor-element elementor-element-70e6ede syd-sticky-section-no elementor-widget elementor-widget-counter\" data-id=\"70e6ede\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"counter.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-counter\">\n\t\t\t\t\t\t<div class=\"elementor-counter-number-wrapper\">\n\t\t\t\t<span class=\"elementor-counter-number-prefix\"><\/span>\n\t\t\t\t<span class=\"elementor-counter-number\" data-duration=\"2000\" data-to-value=\"75\" data-from-value=\"0\" data-delimiter=\",\">0<\/span>\n\t\t\t\t<span class=\"elementor-counter-number-suffix\">%<\/span>\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-08910c5 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"08910c5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>des violations de donn\u00e9es r\u00e9ussies d\u00e9butent sur des actifs expos\u00e9s sur Internet.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7652aef elementor-section-stretched elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"7652aef\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;stretch_section&quot;:&quot;section-stretched&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-ed0df97 syd-sticky-section-no\" data-id=\"ed0df97\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-14be053 syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"14be053\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5e63e1f elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"5e63e1f\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6502000 syd-sticky-section-no\" data-id=\"6502000\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-67d7aa6 syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"67d7aa6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2655d51e elementor-widget-divider--view-line_text elementor-widget-divider--element-align-right syd-sticky-section-no elementor-widget elementor-widget-divider\" data-id=\"2655d51e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t\t<span class=\"elementor-divider__text elementor-divider__element\">\n\t\t\t\tSecOps\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6bb6bd8c syd-sticky-section-no elementor-widget elementor-widget-heading\" data-id=\"6bb6bd8c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Articles connexes<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7aa4a5bf elementor-grid-3 elementor-grid-tablet-2 elementor-grid-mobile-1 elementor-posts--thumbnail-top syd-sticky-section-no elementor-widget elementor-widget-posts\" data-id=\"7aa4a5bf\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;classic_columns&quot;:&quot;3&quot;,&quot;classic_columns_tablet&quot;:&quot;2&quot;,&quot;classic_columns_mobile&quot;:&quot;1&quot;,&quot;classic_row_gap&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:35,&quot;sizes&quot;:[]},&quot;classic_row_gap_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;classic_row_gap_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]}}\" data-widget_type=\"posts.classic\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-posts-container elementor-posts elementor-posts--skin-classic elementor-grid\" role=\"list\">\n\t\t\t\t<article class=\"elementor-post elementor-grid-item post-22613 post type-post status-publish format-standard has-post-thumbnail hentry category-security-operations-soc-detection\" role=\"listitem\">\n\t\t\t\t<a class=\"elementor-post__thumbnail__link\" href=\"https:\/\/www.stroople.com\/fr\/why-is-mfa-not-the-ultimate-solution-in-cybersecurity\/\" tabindex=\"-1\" >\n\t\t\t<div class=\"elementor-post__thumbnail\"><img decoding=\"async\" width=\"2560\" height=\"1707\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/03\/pawel-czerwinski-3kzmA3438Ao-unsplash-scaled.jpg\" class=\"attachment-full size-full wp-image-22616\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/03\/pawel-czerwinski-3kzmA3438Ao-unsplash-scaled.jpg 2560w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/03\/pawel-czerwinski-3kzmA3438Ao-unsplash-300x200.jpg 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/03\/pawel-czerwinski-3kzmA3438Ao-unsplash-1024x683.jpg 1024w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/03\/pawel-czerwinski-3kzmA3438Ao-unsplash-768x512.jpg 768w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/03\/pawel-czerwinski-3kzmA3438Ao-unsplash-1536x1024.jpg 1536w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/03\/pawel-czerwinski-3kzmA3438Ao-unsplash-2048x1365.jpg 2048w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/03\/pawel-czerwinski-3kzmA3438Ao-unsplash-18x12.jpg 18w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/03\/pawel-czerwinski-3kzmA3438Ao-unsplash-1000x667.jpg 1000w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/03\/pawel-czerwinski-3kzmA3438Ao-unsplash-230x153.jpg 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/03\/pawel-czerwinski-3kzmA3438Ao-unsplash-350x233.jpg 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/03\/pawel-czerwinski-3kzmA3438Ao-unsplash-480x320.jpg 480w\" sizes=\"(max-width: 2560px) 100vw, 2560px\" \/><\/div>\n\t\t<\/a>\n\t\t\t\t<div class=\"elementor-post__text\">\n\t\t\t\t<h3 class=\"elementor-post__title\">\n\t\t\t<a href=\"https:\/\/www.stroople.com\/fr\/why-is-mfa-not-the-ultimate-solution-in-cybersecurity\/\" >\n\t\t\t\tPourquoi la MFA n'est-elle pas la solution ultime en mati\u00e8re de cybers\u00e9curit\u00e9 ?\t\t\t<\/a>\n\t\t<\/h3>\n\t\t\t\t<\/div>\n\t\t\t\t<\/article>\n\t\t\t\t<article class=\"elementor-post elementor-grid-item post-15985 post type-post status-publish format-standard has-post-thumbnail hentry category-security-operations-soc-detection\" role=\"listitem\">\n\t\t\t\t<a class=\"elementor-post__thumbnail__link\" href=\"https:\/\/www.stroople.com\/fr\/tips-for-penetration-testing\/\" tabindex=\"-1\" >\n\t\t\t<div class=\"elementor-post__thumbnail\"><img loading=\"lazy\" decoding=\"async\" width=\"2560\" height=\"885\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/01\/AdobeStock_330628425-scaled.jpeg\" class=\"attachment-full size-full wp-image-15988\" alt=\"Nos astuces pour les tests d&#039;intrusions\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/01\/AdobeStock_330628425-scaled.jpeg 2560w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/01\/AdobeStock_330628425-300x104.jpeg 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/01\/AdobeStock_330628425-1024x354.jpeg 1024w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/01\/AdobeStock_330628425-768x266.jpeg 768w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/01\/AdobeStock_330628425-1536x531.jpeg 1536w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/01\/AdobeStock_330628425-2048x708.jpeg 2048w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/01\/AdobeStock_330628425-18x6.jpeg 18w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/01\/AdobeStock_330628425-1000x346.jpeg 1000w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/01\/AdobeStock_330628425-230x80.jpeg 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/01\/AdobeStock_330628425-350x121.jpeg 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/01\/AdobeStock_330628425-480x166.jpeg 480w\" sizes=\"(max-width: 2560px) 100vw, 2560px\" \/><\/div>\n\t\t<\/a>\n\t\t\t\t<div class=\"elementor-post__text\">\n\t\t\t\t<h3 class=\"elementor-post__title\">\n\t\t\t<a href=\"https:\/\/www.stroople.com\/fr\/tips-for-penetration-testing\/\" >\n\t\t\t\tNos astuces pour les tests d'intrusions\t\t\t<\/a>\n\t\t<\/h3>\n\t\t\t\t<\/div>\n\t\t\t\t<\/article>\n\t\t\t\t<article class=\"elementor-post elementor-grid-item post-16027 post type-post status-publish format-standard has-post-thumbnail hentry category-security-operations-soc-detection\" role=\"listitem\">\n\t\t\t\t<a class=\"elementor-post__thumbnail__link\" href=\"https:\/\/www.stroople.com\/fr\/the-2-benefits-of-phishing-security-test\/\" tabindex=\"-1\" >\n\t\t\t<div class=\"elementor-post__thumbnail\"><img loading=\"lazy\" decoding=\"async\" width=\"2560\" height=\"1703\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/07\/AdobeStock_462107689-1-scaled.jpeg\" class=\"attachment-full size-full wp-image-14018\" alt=\"Les 2 avantages du test de s\u00e9curit\u00e9 contre le phishing\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/07\/AdobeStock_462107689-1-scaled.jpeg 2560w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/07\/AdobeStock_462107689-1-300x200.jpeg 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/07\/AdobeStock_462107689-1-1024x681.jpeg 1024w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/07\/AdobeStock_462107689-1-768x511.jpeg 768w\" sizes=\"(max-width: 2560px) 100vw, 2560px\" \/><\/div>\n\t\t<\/a>\n\t\t\t\t<div class=\"elementor-post__text\">\n\t\t\t\t<h3 class=\"elementor-post__title\">\n\t\t\t<a href=\"https:\/\/www.stroople.com\/fr\/the-2-benefits-of-phishing-security-test\/\" >\n\t\t\t\tLes 2 avantages du test de s\u00e9curit\u00e9 contre le phishing\t\t\t<\/a>\n\t\t<\/h3>\n\t\t\t\t<\/div>\n\t\t\t\t<\/article>\n\t\t\t\t<\/div>\n\t\t\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-014cc98 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"014cc98\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-05bcd78 syd-sticky-section-no\" data-id=\"05bcd78\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap\">\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Quand un simple jeton suffisait \u00e0 \u00e9branler la confiance dans le cloud Tout semblait sous contr\u00f4le dans les environnements Microsoft. MFA appliqu\u00e9e, conditionnelle<\/p>","protected":false},"author":1,"featured_media":24876,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[116],"tags":[],"class_list":["post-24874","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-identity-access-management"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>IAM: CVE-2025-55241 Exposes a Major Weakness in Entra ID - Stroople<\/title>\n<meta name=\"description\" content=\"A critical flaw in Microsoft Entra ID, tracked as CVE-2025-55241, revealed how a mishandled token could grant Global Admin access across tenants. Learn why this matters for IAM and cloud security.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.stroople.com\/fr\/iam-cve-2025-55241-entra-id-vulnerability\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"IAM: CVE-2025-55241 Exposes a Major Weakness in Entra ID - Stroople\" \/>\n<meta property=\"og:description\" content=\"A critical flaw in Microsoft Entra ID, tracked as CVE-2025-55241, revealed how a mishandled token could grant Global Admin access across tenants. Learn why this matters for IAM and cloud security.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.stroople.com\/fr\/iam-cve-2025-55241-entra-id-vulnerability\/\" \/>\n<meta property=\"og:site_name\" content=\"Stroople\" \/>\n<meta property=\"article:published_time\" content=\"2025-09-20T05:58:59+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-02T11:05:18+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/boliviainteligente-wIBDrEv73xY-unsplash-2.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"640\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"STROOPLEADMINISTRATOR\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Stroople1\" \/>\n<meta name=\"twitter:site\" content=\"@Stroople1\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"STROOPLEADMINISTRATOR\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/iam-cve-2025-55241-entra-id-vulnerability\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/iam-cve-2025-55241-entra-id-vulnerability\\\/\"},\"author\":{\"name\":\"STROOPLEADMINISTRATOR\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/person\\\/a1eb93cbbffe1681999993af123a6d44\"},\"headline\":\"IAM: CVE-2025-55241 Exposes a Major Weakness in Entra ID\",\"datePublished\":\"2025-09-20T05:58:59+00:00\",\"dateModified\":\"2026-06-02T11:05:18+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/iam-cve-2025-55241-entra-id-vulnerability\\\/\"},\"wordCount\":594,\"publisher\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/iam-cve-2025-55241-entra-id-vulnerability\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2025\\\/09\\\/boliviainteligente-wIBDrEv73xY-unsplash-2.jpg\",\"articleSection\":[\"IAM\"],\"inLanguage\":\"fr-FR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/iam-cve-2025-55241-entra-id-vulnerability\\\/\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/iam-cve-2025-55241-entra-id-vulnerability\\\/\",\"name\":\"IAM: CVE-2025-55241 Exposes a Major Weakness in Entra ID - Stroople\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/iam-cve-2025-55241-entra-id-vulnerability\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/iam-cve-2025-55241-entra-id-vulnerability\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2025\\\/09\\\/boliviainteligente-wIBDrEv73xY-unsplash-2.jpg\",\"datePublished\":\"2025-09-20T05:58:59+00:00\",\"dateModified\":\"2026-06-02T11:05:18+00:00\",\"description\":\"A critical flaw in Microsoft Entra ID, tracked as CVE-2025-55241, revealed how a mishandled token could grant Global Admin access across tenants. Learn why this matters for IAM and cloud security.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/iam-cve-2025-55241-entra-id-vulnerability\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.stroople.com\\\/iam-cve-2025-55241-entra-id-vulnerability\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/iam-cve-2025-55241-entra-id-vulnerability\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2025\\\/09\\\/boliviainteligente-wIBDrEv73xY-unsplash-2.jpg\",\"contentUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2025\\\/09\\\/boliviainteligente-wIBDrEv73xY-unsplash-2.jpg\",\"width\":640,\"height\":400},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/iam-cve-2025-55241-entra-id-vulnerability\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.stroople.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"IAM: CVE-2025-55241 Exposes a Major Weakness in Entra ID\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#website\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/\",\"name\":\"Stroople\",\"description\":\"Cybersecurity Expertise\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.stroople.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#organization\",\"name\":\"Stroople Cybersecurity\",\"alternateName\":\"Stroople\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Logo-Stroople-responsive.png\",\"contentUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Logo-Stroople-responsive.png\",\"width\":1000,\"height\":1000,\"caption\":\"Stroople Cybersecurity\"},\"image\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Stroople1\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/stroople\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UC_kTnaswN04kjIrHU0Pi_qg\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/person\\\/a1eb93cbbffe1681999993af123a6d44\",\"name\":\"STROOPLEADMINISTRATOR\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g\",\"caption\":\"STROOPLEADMINISTRATOR\"},\"sameAs\":[\"https:\\\/\\\/stroople.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"IAM : CVE-2025-55241 expose une faiblesse majeure dans Entra ID - Stroople","description":"Une faille critique dans Microsoft Entra ID, r\u00e9pertori\u00e9e sous le nom de CVE-2025-55241, a r\u00e9v\u00e9l\u00e9 comment un jeton mal manipul\u00e9 pouvait accorder l'acc\u00e8s \u00e0 l'administrateur global \u00e0 travers les locataires. D\u00e9couvrez l'importance de cette faille pour la gestion des identit\u00e9s et de la s\u00e9curit\u00e9 dans les nuages.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.stroople.com\/fr\/iam-cve-2025-55241-entra-id-vulnerability\/","og_locale":"fr_FR","og_type":"article","og_title":"IAM: CVE-2025-55241 Exposes a Major Weakness in Entra ID - Stroople","og_description":"A critical flaw in Microsoft Entra ID, tracked as CVE-2025-55241, revealed how a mishandled token could grant Global Admin access across tenants. Learn why this matters for IAM and cloud security.","og_url":"https:\/\/www.stroople.com\/fr\/iam-cve-2025-55241-entra-id-vulnerability\/","og_site_name":"Stroople","article_published_time":"2025-09-20T05:58:59+00:00","article_modified_time":"2026-06-02T11:05:18+00:00","og_image":[{"width":640,"height":400,"url":"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/boliviainteligente-wIBDrEv73xY-unsplash-2.jpg","type":"image\/jpeg"}],"author":"STROOPLEADMINISTRATOR","twitter_card":"summary_large_image","twitter_creator":"@Stroople1","twitter_site":"@Stroople1","twitter_misc":{"\u00c9crit par":"STROOPLEADMINISTRATOR","Dur\u00e9e de lecture estim\u00e9e":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.stroople.com\/iam-cve-2025-55241-entra-id-vulnerability\/#article","isPartOf":{"@id":"https:\/\/www.stroople.com\/iam-cve-2025-55241-entra-id-vulnerability\/"},"author":{"name":"STROOPLEADMINISTRATOR","@id":"https:\/\/www.stroople.com\/#\/schema\/person\/a1eb93cbbffe1681999993af123a6d44"},"headline":"IAM: CVE-2025-55241 Exposes a Major Weakness in Entra ID","datePublished":"2025-09-20T05:58:59+00:00","dateModified":"2026-06-02T11:05:18+00:00","mainEntityOfPage":{"@id":"https:\/\/www.stroople.com\/iam-cve-2025-55241-entra-id-vulnerability\/"},"wordCount":594,"publisher":{"@id":"https:\/\/www.stroople.com\/#organization"},"image":{"@id":"https:\/\/www.stroople.com\/iam-cve-2025-55241-entra-id-vulnerability\/#primaryimage"},"thumbnailUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/boliviainteligente-wIBDrEv73xY-unsplash-2.jpg","articleSection":["IAM"],"inLanguage":"fr-FR"},{"@type":"WebPage","@id":"https:\/\/www.stroople.com\/iam-cve-2025-55241-entra-id-vulnerability\/","url":"https:\/\/www.stroople.com\/iam-cve-2025-55241-entra-id-vulnerability\/","name":"IAM : CVE-2025-55241 expose une faiblesse majeure dans Entra ID - Stroople","isPartOf":{"@id":"https:\/\/www.stroople.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.stroople.com\/iam-cve-2025-55241-entra-id-vulnerability\/#primaryimage"},"image":{"@id":"https:\/\/www.stroople.com\/iam-cve-2025-55241-entra-id-vulnerability\/#primaryimage"},"thumbnailUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/boliviainteligente-wIBDrEv73xY-unsplash-2.jpg","datePublished":"2025-09-20T05:58:59+00:00","dateModified":"2026-06-02T11:05:18+00:00","description":"Une faille critique dans Microsoft Entra ID, r\u00e9pertori\u00e9e sous le nom de CVE-2025-55241, a r\u00e9v\u00e9l\u00e9 comment un jeton mal manipul\u00e9 pouvait accorder l'acc\u00e8s \u00e0 l'administrateur global \u00e0 travers les locataires. D\u00e9couvrez l'importance de cette faille pour la gestion des identit\u00e9s et de la s\u00e9curit\u00e9 dans les nuages.","breadcrumb":{"@id":"https:\/\/www.stroople.com\/iam-cve-2025-55241-entra-id-vulnerability\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.stroople.com\/iam-cve-2025-55241-entra-id-vulnerability\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.stroople.com\/iam-cve-2025-55241-entra-id-vulnerability\/#primaryimage","url":"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/boliviainteligente-wIBDrEv73xY-unsplash-2.jpg","contentUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/boliviainteligente-wIBDrEv73xY-unsplash-2.jpg","width":640,"height":400},{"@type":"BreadcrumbList","@id":"https:\/\/www.stroople.com\/iam-cve-2025-55241-entra-id-vulnerability\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.stroople.com\/"},{"@type":"ListItem","position":2,"name":"IAM: CVE-2025-55241 Exposes a Major Weakness in Entra ID"}]},{"@type":"WebSite","@id":"https:\/\/www.stroople.com\/#website","url":"https:\/\/www.stroople.com\/","name":"Stroople","description":"Expertise en cybers\u00e9curit\u00e9","publisher":{"@id":"https:\/\/www.stroople.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.stroople.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/www.stroople.com\/#organization","name":"Stroople Cybers\u00e9curit\u00e9","alternateName":"Stroople","url":"https:\/\/www.stroople.com\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.stroople.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/05\/Logo-Stroople-responsive.png","contentUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/05\/Logo-Stroople-responsive.png","width":1000,"height":1000,"caption":"Stroople Cybersecurity"},"image":{"@id":"https:\/\/www.stroople.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Stroople1","https:\/\/www.linkedin.com\/company\/stroople\/","https:\/\/www.youtube.com\/channel\/UC_kTnaswN04kjIrHU0Pi_qg"]},{"@type":"Person","@id":"https:\/\/www.stroople.com\/#\/schema\/person\/a1eb93cbbffe1681999993af123a6d44","name":"STROOPLEADMINISTRATEUR","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g","caption":"STROOPLEADMINISTRATOR"},"sameAs":["https:\/\/stroople.com"]}]}},"_links":{"self":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts\/24874","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/comments?post=24874"}],"version-history":[{"count":7,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts\/24874\/revisions"}],"predecessor-version":[{"id":27864,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts\/24874\/revisions\/27864"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/media\/24876"}],"wp:attachment":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/media?parent=24874"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/categories?post=24874"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/tags?post=24874"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}