> TritonInfoSec News
Home / Jul 26, 2026 / Story
0
#5 Dark Reading general July 24, 2026 at 12:48 UTC

Default Azure Automation Setting Enables Cross-Tenant Identity Takeover

By Jeffrey Schwartz

AI Summary

Microsoft patched a public-by-default misconfiguration in Azure Automation combined with code-level flaws that could have allowed attackers to perform cross-tenant identity takeover, gaining access to other tenants' data, credentials, and cloud workloads. The issue stemmed from Azure Automation's default configuration exposing managed identity capabilities beyond intended scope. Cloud security teams should audit Azure Automation configurations and managed identity permissions as a priority remediation action.

Read full article → https://www.darkreading.com/cloud-security/default…

Relevance score: 82.0/100

# More from July 26

  1. 1
    Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available The Hacker News
  2. 2
    Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE The Hacker News
  3. 3
    Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git The Hacker News
  4. 4
    BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery The Hacker News
  5. 6
    Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable The Hacker News
  6. 7
    Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts BleepingComputer
  7. 8
    Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks The Hacker News
  8. 9
    Golden Chickens Resurfaces With Four New Malware Families and Modular Implants The Hacker News
  9. 10
    Hermes AI agent used to automate attack on Thai Finance Ministry BleepingComputer