Cybersecurity researchers have disclosed an unpatched security vulnerability in the protocol used by Microsoft Azure Active Directory that potential adversaries could abuse to stage undetected brute-force attacks.
Source: https://thehackernews.com/2021/09/new-azure-ad-bug-lets-hackers-brute.html