Posted inAzure Security
Cosmos DB Now Chaos DB
Microsoft warned thousands of its cloud computing customers, including some of the world's largest companies, that intruders could have the ability to read, change or even delete their main databases.…
Posted inAzure Security
Azure Credentials exposed in PlainText
Mimikatz has been used by a vulnerability researcher to dump a user's unencrypted plaintext Microsoft Azure credentials from Microsoft's new Windows 365 Cloud PC service.Mimikatz, an open-source software that allows…
Posted inAzure Security
Azure Fusion Detection
Microsoft has come up with a new ransomware detection feature for Azure that will send alerts to security teams when the system observes actions potentially associated with ransomware activities. Azure worked with…
Posted inAzure Security
BOT Protection On Azure WAF
Microsoft has announced that the WAF bot protection feature has reached general availability on Azure Application Gateway starting this week. Azure WAF is a cloud-native service designed to protect customers' web…
Posted inAzure Security cloudsecurity cyber policy
MITRE hooks AZURE ATT&CK
MITRE's Centre for Threat-Informed Defence (CTID) and Microsoft have jointly rolled out Security Stack Mappings for Azure, aimed at bringing the former's (ATT&CK) framework into the latter's cloud platform MITRE…
Posted inAzure Security cloudsecurity
Azure Identity Protection with New Risk Id feature
Microsoft recently released a few new AAD features, namely My Apps "collections" and new "risk detections" capabilities, into general availability. With these features, the company intends to simplifying identity and access management while…
Posted inAzure Security cloudsecurity
Decentralised identity
Decentralized identity also known as self-sovereign identity is earning a reputation as a silver bullet that can solve all of today’s identity problems. It ensures perfect privacy, informed consent, user…
Posted inAzure Security cloudsecurity
Chimera Abuses Cloud
Security researchers are watching a threat group that takes advantage of Microsoft and Google cloud services with the goal of exfiltrating data across a broad range of target organizations. The…