Microsoft's Security Culture Just Isn't Up to Scratch (srslyriskybiz.substack.com)

Yeah, everybody checks the scope of access tokens. I mean who doesn't? That would mean that some of our security architectures were impractical.