Application Security 1 Breaking Microsoft SSO: How a Rogue Tenant Led to Account Takeover Sep 3, 2026