Azure Service Tags tagged as security risk, Microsoft disagrees

Tenable disclosed a high-severity issue in Azure Service Tags that allows attackers to craft SSRF-like requests (abusing Application Insights availability tests and custom headers) to bypass firewall rules and access internal services and APIs across multiple Azure services; Tenable recommends adding authentication/authorization layers because Microsoft does not plan to patch and views Service Tags as a routing mechanism rather than a security boundary, and Microsoft states it has seen no evidence of active exploitation.