Microsoft patches Azure Automation flaw enabling cross-tenant identity takeover

Microsoft has remediated a critical cross-tenant identity takeover vulnerability in Azure Automation and attributed a recent global Microsoft 365 outage to an automated network maintenance bug. The Azure Automation flaw, stemming from a public-by-default setting, posed a significant risk to multi-tenant environments, while the 365 outage highlights systemic vulnerabilities in automated infrastructure management. Both incidents are confirmed by Microsoft, though it remains unclear if the Azure Automation vulnerability was exploited in the wild.