Azure's Weakest Link – Five Full Cross-Tenant Compromises
57 comments
- Points258
- Comments48
57 comments
Story details from Hacker News ↗ · linked article on binarysecurity.no.
Azure's Weakest Link – Five Full Cross-Tenant Compromises was first seen on Hacker News · Front page on Oct 30, 2026. Since then it has appeared in 79 checks on 2 different days. Its best position was #4 of 30, reached on Oct 30, 18:52 UTC. It is #5 right now, holding steady at #5 over the last 6 checks. The same link also trended on Lobsters, which raises its cross-platform score.
Position on Hacker News · Front page at every check (lower is better).
Best rank per day (UTC).
points as reported by Hacker News.
| List | Best | Days | Checks | Last seen |
|---|---|---|---|---|
| Hacker News · Front page | #4 | 2 | 79 | |
| LLobsters · Hottest Azure’s Weakest Link - Five Full Cross-Tenant Compromises | same link | |||
A few top-level comments from Hacker News, shortened. Read the full thread on Hacker News.
If anyone from Microsoft security reads this, could you please do something about login.microsoftonline.com/XXX/v2.0/adminconsent? The callback you're redirecting the user to at the end of that flow is forgeable if an attacker knows an azure tenant ID of a different customer, and putting a "Never use the tenant ID…
When it comes to the amount of cross-tenant leaks Azure looks to be way ahead the competition. Makes me wonder why enterprises still flock there.
maybe we should tag submissions with dates now? [2026-10-02] beginning of curent month feels like two years ago when multiple vulns drop daily
Yes. As of Oct 31, 07:37 UTC it is #5, holding steady at #5 over the last 6 checks.
#4 on Hacker News · Front page, on Oct 30, 18:52 UTC. Trendoday checks this list every 15 minutes.
It was first seen on Oct 30, 2026 and has been on the list on 2 days (79 checks) since.
258 points and 48 comments; submitted by swq115 on Oct 30, 2026.