Azure

We talk about all the newest stories and changes to Microsoft Azure in this section. This includes news about new services, features, and improvements, as well as information about Azure’s cloud solutions, security changes, and the ability to connect to other systems. Learn more about how Azure is pushing the boundaries of cloud computing and helping companies make the switch to digital.

Storm-3068 Hijacks Azure DevOps Pipelines to Steal Kubernetes Credentials After Account Takeover

Microsoft has detailed a cloud-focused intrusion attributed to Storm-3068, in which attackers turned a compromised user account into a launch…

3 weeks ago

Hackers Use Compromised Service Principals to Delete Azure Storage and Steal Cloud Credentials

Microsoft has uncovered an Azure-focused destructive campaign linked to JADEPUFFER, a threat actor the company tracks as Storm-3168. The group…

3 weeks ago

Attackers Bypass Azure AD Conditional Access Using Phantom Device Registration

A recent authorized red team operation by Howler Cell has demonstrated a critical attack path that completely bypasses Microsoft Entra…

6 months ago

Threat Actors Weaponize Bing Ads for Azure Tech Support Scams

A sophisticated tech support scam campaign has emerged, exploiting malicious advertisements on Bing search results to redirect victims to fraudulent…

8 months ago

Azure Private Endpoint Deployments Expose Cloud Resources to DoS Attacks

A critical architectural weakness in Azure's Private Endpoint deployments could allow both accidental and intentional denial of service (DoS) attacks…

9 months ago

Azure Identity Token Flaw Exposes Windows Admin Center to Tenant-Wide Breaches

Cymulate Research Labs discovered a high-severity authentication bypass vulnerability in Microsoft Windows Admin Centre's Azure AD Single Sign-On implementation that…

9 months ago

Massive 15 Tbps DDoS Attack From 500K Devices Slams Azure Network

Microsoft Azure successfully defended against a record-breaking distributed denial-of-service (DDoS) attack that peaked at 15.72 terabits per second (Tbps), making it…

11 months ago

Threat Actors Abuse AzureHound Tool to Enumerate Azure and Entra ID Environments

The cybersecurity landscape continues to shift toward cloud-based attacks, with threat actors increasingly exploiting legitimate security tools for malicious reconnaissance.…

12 months ago

Massive 4TB EY Database Backup Found Publicly Accessible on Azure

A critical security vulnerability was discovered when a complete 4-terabyte SQL Server backup belonging to Ernst & Young (EY), one…

12 months ago

Threat Actors Exploiting Azure Blob Storage to Breach Organizational Repositories

Threat actors are increasingly targeting Azure Blob Storage, Microsoft’s flagship object storage solution, to infiltrate organizational repositories and disrupt critical…

12 months ago