sign up bypass

A design oversight in Microsoft’s Azure API Management Developer Portal now allows attackers to create accounts on tenants where administrators have visually disabled sign‑up, enabling cross‑tenant account creation and potentially exposing subscription keys and API access unless operators act...