Azure Automation enables cross-tenant identity takeovers through default configuration; Microsoft also has three critical infrastructure security vulnerabilities.