Default Azure Automation Setting Enables Cross-Tenant Identity Takeover

Microsoft has addressed vulnerabilities in Azure Automation that could have allowed attackers to take over another tenant's identity. The issues stemmed from a public-by-default configuration and a chain of code flaws. This could have given attackers access to other tenants' data, credentials, and cloud workloads. The flaws have been addressed by Microsoft.