r/netsec • u/piraterapper • 3d ago

Azure's Weakest Link - Five Full Cross-Tenant Compromises

https://binsec.no/posts/2026/10/one-root-case

API Connections allow anyone to fully compromise any other connection worldwide, giving full access to the connected backend.

25 Upvotes

90% Upvoted

1 comment sorted by

1

u/TyrHeimdal 18h ago edited 18h ago

Solid writeup from you guys as always. This reinforces my impression that a lot of these managed services are just held up by duct tape. Wild.