Binary Security Blog company blog

Azure's Weakest Link – Five Full Cross-Tenant Compromises

by Haakon Wik Gulbrandsrud binarysecurity.no published 2026-10-029 min read

In my previous blog posts, Azure’s Weakest Link? and Azure’s Weakest Link - Full Cross-Tenant Compromise, I gave an overview of the severely insecure architecture behind API Connections in Azure, a part of Azure Logic Apps, and an instance of a full cross-tenant compromise using these inherent flaws. Now I am back…

Points

340

HN comments

64

Submissions

1

Cited by

0 commenters

Security & PrivacyInfrastructure & DevOps2026

Related posts from the same era

Claude Code is steganographically marking requests

Thereallo20262,445 points750 commentscited by 3 details

Motorola announces a partnership with GrapheneOS

Motorola News20262,358 points884 commentscited by 10 details

The newest Instagram “exploit” is the goofiest I've seen

SSid20262,210 points491 commentscited by 3 details

Everyone knows your location: tracking myself down through in-app ads

Tim Shmykov20251,957 points600 commentscited by 3 details

Axios compromised on NPM – Malicious versions drop remote access trojan

StepSecurity Blog20261,934 points807 comments details

Our investigation into the suspicious pressure on Archive.today

AdGuard DNS Blog20251,816 points443 comments details