Abandoned reply URL in Azure AD app could let attackers gain privileges | Heykuki News