https://dirkjanm.io/obtaining-global-admin-in-every-entra-id...
"This vulnerability could have allowed me to compromise every Entra ID tenant in the world (except probably those in national cloud deployments)."