I found a bug that could hack ANY Microsoft 365 tenant

Entra.Chat

I found a bug that could hack ANY Microsoft 365 tenant - Here's what happened

0:00

-1:00:39

I found a bug that could hack ANY Microsoft 365 tenant - Here's what happened

From Curiosity to CVE: The Story Behind Entra’s Wildest Exploit

Merill Fernando

Oct 24, 2025

Transcript

In this episode, I chat with Dirk-jan Mollema, the legendary researcher behind some of the most important discoveries in Microsoft identity security.

We go deep into how curiosity led him from tinkering with web tools to uncovering one of the biggest Entra ID vulnerabilities ever found.

He shares the story behind the CVE that rocked the cloud world, the stress of realizing what he’d uncovered, and the mindset that drives his relentless research. If you’ve ever wondered what it feels like to find a bug that could break the internet—this one’s for you.

PS: If you like this episode please leave a review on Apple Podcast or Spotify 🙏

Subscribe with your favorite podcast player or watch on YouTube 👇

About Dirk-jan Mollema

Dirk-Jan Mollema is a security researcher and consultant specializing in Microsoft Entra ID (Azure AD) and Active Directory security. He is the creator of popular offensive security tools including ROADtools and ROADrecon.

With seven years of Entra research and nearly a decade in AD security, Dirk-Jan has discovered numerous critical vulnerabilities and has played an important role in helping improve Microsoft’s cloud security posture. He provides training and consulting services through his company Outsider Security.

Twitter → https://twitter.com/_dirkjan

LinkedIn → https://www.linkedin.com/in/dirkjanm

Contact → https://outsidersecurity.nl