About MOUNT10 / Blog / Entra ID-Schwachstelle

Entra ID Risk in Focus: Why Backups Are Now Essential

Microsoft Entra ID (formerly Azure AD) is the backbone of modern cloud identities. From user access to roles and app permissions – everything a company does in Microsoft 365 relies on Entra ID. But this central role also makes the system highly vulnerable. The recent critical vulnerability has impressively demonstrated how quickly identity structures can be compromised – and why companies urgently need additional security and recovery measures.

Why the vulnerability is so dangerous

The newly disclosed Entra ID security flaw shows that an attacker can obtain global administrator rights with a single compromised token or unpatched legacy authentication mechanisms – almost invisibly.

The danger lies not only in the attack itself, but especially in its consequences:

Identities are a “single point of failure”

If Entra ID is manipulated, the company loses control over:

User accounts
MFA settings
App permissions
Security groups
Conditional Access policies
Administrator roles

Without this control, practically the entire Microsoft 365 environment comes to a standstill.

Attackers can cover their tracks

Certain attack paths leave almost no logs. Some token types cannot technically be revoked, meaning an attacker may remain in the system even after passwords and MFA have been reset.

A compromised Entra ID cannot simply be reinstalled

There is no switch like “Reset entire Active Directory”. When identity data is destroyed, manipulated, or deleted, the company is in an extremely difficult position – often without a recovery plan.

Why an Entra ID backup is essential

Microsoft does not offer full recovery of all Entra ID objects.

Deleted or manipulated objects such as:

Users
Groups
Roles
Service Principals
App registrations
Conditional Access policies

… can only be restored partially – or not at all, especially not to a defined point in time.

A targeted attack could therefore:

Delete administrator roles
Alter authentication methods
Manipulate group permissions
Sabotage critical app access

Without a backup, a company may be completely unable to operate.

How MOUNT10 helps: Full, independent, Swiss identity backup

A backup with MOUNT10 provides several key advantages that close exactly this gap:

Independent, isolated copies of Entra ID data

The data does not reside in Microsoft’s infrastructure but is fully separated – in Switzerland, inside the highly secure SWISS FORT KNOX.
Even if an attacker gains control over Entra ID, they cannot delete the backup.

Recovery of critical identity objects

MOUNT10 enables complete restoration of compromised Entra ID objects – a decisive advantage when vital identity data has been manipulated or deleted.

Protection against “silent attacks”

Because some Entra ID attacks are barely visible, companies often detect them too late.
With a backup, you can return to a previous, secure state – even when logs are incomplete.

Maximum geographic and legal security

All backups are stored in:

isolated, physically protected data centers
in Switzerland
outside the Microsoft cloud
fully under Swiss data protection law

For identity data, this separation is a major security advantage.

Identities are the new gold – protect them

The Entra ID vulnerability CVE-2025-55241 has clearly shown: even the strongest cloud infrastructure can suddenly become vulnerable. Identities are the foundation of modern IT – and an attack can paralyze an entire company.

An independent backup is not a “nice-to-have”, but a mandatory safeguard.

With MOUNT10, companies receive:

a sovereign, fully independent backup solution
highest Swiss data security
protection against attacks, misconfigurations, and human error
the ability to respond quickly and effectively in an emergency

If identities are the new attack surface No. 1, then an Entra ID backup is the most important line of defense.

Entra ID

Entra ID is the perfect addition to CLOUD 2 CLOUD Microsoft 365 Backup: Intune, Conditional Access Policies, and users are backed up in SWISS FORT KNOX.

Details