Content Security Policy enforcement on login.microsoftonline.com will stop browser extensions from injecting code during authentication. No workaround. No exceptions.
Microsoft has reminded customers that the Entra ID authentication system will get better protection against external script injection attacks starting next month.
Microsoft released advanced hunting queries (AHQs) and a PowerShell script to find and recover some of the Windows application shortcuts deleted Friday morning by a buggy Microsoft Defender ASR rule.