Microsoft to Require Multi-Factor Authentication for All Azure Portal Sign-Ins to Enhance Account Security
Microsoft is set to enforce mandatory multi-factor authentication (MFA) for all Azure sign-in attempts beginning in October 2024, reinforcing its commitment to safeguarding customer...
Critical Azure API Connection Vulnerability Exposes Cross-Tenant Compromise
A critical vulnerability in Microsoft Azure's API Connection architecture that enabled complete cross-tenant compromise of cloud resources worldwide.
The bug, which Microsoft patched within...
New Technique Unveiled by Researchers to Detect Azure Arc and Ensure Persistence in Enterprise Environments
Security researchers have introduced a comprehensive methodology for detecting Microsoft Azure Arc deployments and leveraging its features to maintain persistence in enterprise networks.
Azure...
Azure API Vulnerabilities Leak VPN Keys and Enable Over-Privileged Access Through Built-In Roles
Security researchers have uncovered misconfigurations and API vulnerabilities in Microsoft Azure that could expose critical secrets, including VPN keys, and grant over-privileged access through...
Unauthenticated API Endpoint Exposes Access Tokens of 50,000+ Azure AD Users
CloudSEK's BeVigil platform has uncovered a critical security vulnerability affecting an aviation industry giant, where an exposed JavaScript file containing an unauthenticated API endpoint...