Unauthenticated intruders can mint admin tokens, and exposed servers are already being hit
To respect copyright, we link to the source rather than republishing the full text. Read the complete article on The Register.