Beware the Hidden Risk in Your Entra Environment

A gap in access control in Microsoft Entras subscription handling is allowing guest users to create and transfer subscriptions into the tenant they are invited into. All the guest user needs are the permissions to create subscriptions.