Posted inAzure Security
Azure OMIGOD !
A range of Vulnerabilities in Azure remain vulnerable to exploitation as customers required to apply the patch manually. Dubbed OMIGOD, the vulnerabilities relate to the Open Manage Infrastructure agent that’s…
Posted inAzure Security
AzureScape Vulnerability
A new vulnerability dubbed AzureScape involving the Azure Container Instances, a cloud service that enables companies to deploy packaged applications in the cloud. This issue allotted a malicious container to…
Posted inAzure Security
Cloud Katana Open Sourced
A cloud-native serverless application Cloud Katana built on the top of Azure Functions to assess security controls in the cloud and hybrid cloud environments. This tool is an event-driven, serverless…
Posted inAzure Security
Cosmos DB Now Chaos DB
Microsoft warned thousands of its cloud computing customers, including some of the world's largest companies, that intruders could have the ability to read, change or even delete their main databases.…
Posted inAzure Security
Azure Credentials exposed in PlainText
Mimikatz has been used by a vulnerability researcher to dump a user's unencrypted plaintext Microsoft Azure credentials from Microsoft's new Windows 365 Cloud PC service.Mimikatz, an open-source software that allows…
Posted inAzure Security
Azure Fusion Detection
Microsoft has come up with a new ransomware detection feature for Azure that will send alerts to security teams when the system observes actions potentially associated with ransomware activities. Azure worked with…
Posted inAzure Security
BOT Protection On Azure WAF
Microsoft has announced that the WAF bot protection feature has reached general availability on Azure Application Gateway starting this week. Azure WAF is a cloud-native service designed to protect customers' web…
Posted inAzure Security cloudsecurity cyber policy
MITRE hooks AZURE ATT&CK
MITRE's Centre for Threat-Informed Defence (CTID) and Microsoft have jointly rolled out Security Stack Mappings for Azure, aimed at bringing the former's (ATT&CK) framework into the latter's cloud platform MITRE…