Hybrid clouds have two attack surfaces and you’re not paying enough attention to either

Researchers at Cymulate disclosed and responsibly reported four CVEs in Microsoft's Windows Admin Center that allowed token forgery/reuse and leveraged an unprotected on‑prem directory, enabling potential takeover of managed VMs and attacks crossing between cloud and on‑prem environments; Microsoft patched the issues and there is no evidence of active exploitation.