Azure's Weakest Link – Five Full Cross-Tenant Compromises

(binarysecurity.no)

76 points | by swq115 3 hours ago

1 comments

  • thewisenerd 33 minutes ago
    path traversal and IDOR..

    likely been active since the inception of these capabilities

    wonder if the recommendation to "add randomness to resource names" is because of this (unrelated security by obscurity lol)

    • chinathrow 1 minute ago
      Gotta put these backdoors somewhere.