Entra ID Risk in Focus: Why Backups Are Now Essential

Why the vulnerability is so dangerous

The newly disclosed Entra ID security flaw shows that an attacker can obtain global administrator rights with a single compromised token or unpatched legacy authentication mechanisms – almost invisibly.

Why an Entra ID backup is essential

Microsoft does not offer full recovery of all Entra ID objects.

Deleted or manipulated objects such as:

• Users

• Groups

• Roles

• Service Principals

• App registrations

• Conditional Access policies

… can only be restored partially – or not at all, especially not to a defined point in time.

A targeted attack could therefore:

• Delete administrator roles

• Alter authentication methods

• Manipulate group permissions

• Sabotage critical app access

Without a backup, a company may be completely unable to operate.

How MOUNT10 helps: Full, independent, Swiss identity backup

A backup with MOUNT10 provides several key advantages that close exactly this gap:

Independent, isolated copies of Entra ID data

The data does not reside in Microsoft’s infrastructure but is fully separated – in Switzerland, inside the highly secure SWISS FORT KNOX.
Even if an attacker gains control over Entra ID, they cannot delete the backup.

Recovery of critical identity objects

MOUNT10 enables complete restoration of compromised Entra ID objects – a decisive advantage when vital identity data has been manipulated or deleted.

Protection against “silent attacks”

Because some Entra ID attacks are barely visible, companies often detect them too late.
With a backup, you can return to a previous, secure state – even when logs are incomplete.

Maximum geographic and legal security

All backups are stored in:

• isolated, physically protected data centers

• in Switzerland

• outside the Microsoft cloud

• fully under Swiss data protection law

For identity data, this separation is a major security advantage.

Identities are the new gold – protect them

The Entra ID vulnerability CVE-2025-55241 has clearly shown: even the strongest cloud infrastructure can suddenly become vulnerable. Identities are the foundation of modern IT – and an attack can paralyze an entire company.

An independent backup is not a “nice-to-have”, but a mandatory safeguard.

With MOUNT10, companies receive:

• a sovereign, fully independent backup solution

• highest Swiss data security

• protection against attacks, misconfigurations, and human error

• the ability to respond quickly and effectively in an emergency

If identities are the new attack surface No. 1, then an Entra ID backup is the most important line of defense.