Azure

We talk about all the newest stories and changes to Microsoft Azure in this section. This includes news about new services, features, and improvements, as well as information about Azure’s cloud solutions, security changes, and the ability to connect to other systems. Learn more about how Azure is pushing the boundaries of cloud computing and helping companies make the switch to digital.

Hackers Exploit Azure App Proxy Pre-Authentication to Access Private NetworksHackers Exploit Azure App Proxy Pre-Authentication to Access Private Networks

Hackers Exploit Azure App Proxy Pre-Authentication to Access Private Networks

Hackers are exploiting a vulnerability in Microsoft's Azure App Proxy by manipulating the pre-authentication settings to gain unauthorized access to…

2 weeks ago
Hackers Exploit AWS & Microsoft Azure for Large-Scale Cyber AttacksHackers Exploit AWS & Microsoft Azure for Large-Scale Cyber Attacks

Hackers Exploit AWS & Microsoft Azure for Large-Scale Cyber Attacks

Silent Push, a cybersecurity research firm, has introduced the term "infrastructure laundering" to describe a sophisticated method used by cybercriminals…

2 months ago
Hackers Exploit OAuth 2.0 Code Flow Using AiTM Attack on Microsoft Azure ADHackers Exploit OAuth 2.0 Code Flow Using AiTM Attack on Microsoft Azure AD

Hackers Exploit OAuth 2.0 Code Flow Using AiTM Attack on Microsoft Azure AD

Security enthusiasts and professionals are turning their focus towards a new angle on phishing attacks in the identity and access…

2 months ago
Azure Data Factory And Apache Airflow Integration Flaws Let Attackers Gain Write AccessAzure Data Factory And Apache Airflow Integration Flaws Let Attackers Gain Write Access

Azure Data Factory And Apache Airflow Integration Flaws Let Attackers Gain Write Access

Researchers have uncovered vulnerabilities in Microsoft Azure Data Factory's integration with Apache Airflow, which could potentially allow attackers to gain…

4 months ago
Azure API Management Vulnerabilities Let Attackers Escalate PrivilegesAzure API Management Vulnerabilities Let Attackers Escalate Privileges

Azure API Management Vulnerabilities Let Attackers Escalate Privileges

Recent discoveries by Binary Security have revealed critical vulnerabilities in Azure API Management (APIM) that could allow attackers with minimal privileges to…

5 months ago
Researchers Backdoored Azure Automation Account Packages And Runtime EnvironmentsResearchers Backdoored Azure Automation Account Packages And Runtime Environments

Researchers Backdoored Azure Automation Account Packages And Runtime Environments

Runtime environments offer a flexible way to customize Automation Account Runbooks with specific packages. While base system-generated environments can't be…

6 months ago
Iranian Hackers Using Multi-Stage Malware To Attack Govt And Defense Sectors Via LinkedInIranian Hackers Using Multi-Stage Malware To Attack Govt And Defense Sectors Via LinkedIn

Iranian Hackers Using Multi-Stage Malware To Attack Govt And Defense Sectors Via LinkedIn

Microsoft has identified a new Iranian state-sponsored threat actor, Peach Sandstorm, deploying a custom multi-stage backdoor named Tickler.  This backdoor…

7 months ago
Microsoft Details On Using KQL To Hunt For MFA ManipulationsMicrosoft Details On Using KQL To Hunt For MFA Manipulations

Microsoft Details On Using KQL To Hunt For MFA Manipulations

It is difficult to secure cloud accounts from threat actors who exploit multi-factor authentication (MFA) settings. Threat actors usually alter…

10 months ago
Microsoft Details AI Jailbreaks And How They Can Be MitigatedMicrosoft Details AI Jailbreaks And How They Can Be Mitigated

Microsoft Details AI Jailbreaks And How They Can Be Mitigated

Generative AI systems comprise several components and models geared to enhancing human interactions with the system.  However, while being as…

10 months ago
New Azure Hacking Campaign Steals Senior Executive AccountsNew Azure Hacking Campaign Steals Senior Executive Accounts

New Azure Hacking Campaign Steals Senior Executive Accounts

An ongoing campaign of cloud account takeover has affected hundreds of user accounts, including those of senior executives, and impacted…

1 year ago