Researchers from Secureworks Counter Threat Unit (CTU) discovered a critical vulnerability in Microsoft’s Power Platform via the Azure Active Directory (AD) environment, allowing attackers to exploit an abandoned reply URL and gain access tokens and elevated privileges.
View full story…