credential-injection 4 EntraGoat: Application Ownership Chain and Credential Bypass May 14, 2026 BadZure: Managed Identity Abuse via Logic App May 14, 2026 BadZure: Cloud Application Administrator vs Application Administrator May 14, 2026 BadZure: Application Administrator via Group Membership May 14, 2026