Microsoft patches Azure Automation flaw enabling cross-tenant identity takeover

Microsoft has remediated a configuration vulnerability in Azure Automation that allowed unauthorized access to cross-tenant identities and data. The flaw stemmed from a public-by-default setting combined with code execution vulnerabilities, posing a significant risk to multi-tenant cloud environments. It remains unclear if the vulnerability was exploited in the wild prior to the patch.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works