One Shared API Gateway, Five Tenant Compromises: Inside Binary Security's Azure API Connections Research
Binary Security's research shows how a shared Azure APIM gateway let attackers reach any tenant's Key Vault, SQL, or other API Connection backend using path traversal.