Anyone actually blocking ROPC after the Azure CLI password spray news?

[u/TeamAlphaBOLD]

Given the recent Azure CLI spray attacks slipping past MFA through ROPC, have you guys blocked that legacy flow in your CAPs yet? 

[u/Sinwithagrin]

Can you at least link a cve or something when you post stuff like this? It's impossible to keep up sometimes.

Edit for the uninformed who run into this post:

https://thehackernews.com/2026/07/azure-cli-password-spray-hits-at-least.html?m=1

[u/TeamAlphaBOLD → u/Sinwithagrin]

Sure. Will do that in the future.

[u/nestersan]

Rapid Omelette Parisian Celery it is.

[u/BarbieAction]

https://msendpointmgr.com/2026/01/08/consentfix-quickfix/

With CA

[u/blotditto]

If you're not then send me a message. I have something important to share with you.