AZURE'S WEAKEST LINK? HOW API CONNECTIONS SPILL SECRETS

Summary from the TLDR InfoSec newsletter

Binary Security found undocumented Azure API Connections enabling privilege escalation. With Reader permissions, attackers can GET requests to backend resources like Key Vaults, Defender ATP, and third-party services such as Jira and Salesforce.