Default Azure Automation Setting Enables Cross-Tenant Identity Takeover

A critical vulnerability in Microsoft's Azure Automation service, stemming from a default public configuration for automation account identities, could have allowed attackers to take over another tenant's identity and access their data and cloud resources. While the default setting has been corrected, researchers warn…