> This could have gone unnoticed for years as so many cloud provider gaffes do. I think that Microsoft is getting away easy here with Oasis publishing the vuln

> This could have gone unnoticed for years as so many cloud provider gaffes do. I think that Microsoft is getting away easy here with Oasis publishing the vulnerability report. If Microsoft published the report it would be incumbent upon them to include information about what they did to discover whether this happened before Oasis reported the problem. One wonders how many Azure accounts might have been compromised and are even now allowing data to be exfiltrated.