Security News Microsoft Patches Entra ID Role Flaw That Enabled Service Principal Takeover TheHackerNews Daniel Bender 28 Apr 2026 Agent ID Administrator enabled service principal takeover before April 9, 2026 patch, exposing privilege escalation risk in Entra ID tenants.