Microsoft has addressed a critical misconfiguration and chain of code flaws in Azure Automation that could have led to cross-tenant identity takeover. A public-by-default setting, combined with other vulnerabilities, could have allowed attackers to seize another tenant’s identity and access their data, credentials, and cloud workloads. This highlights the importance of secure default configurations and continuous monitoring in cloud environments.