Browsing tag
An Iran-nexus threat actor known as UNC1549 has been attributed with medium confidence to a new set of attacks targeting aerospace, aviation, and defense industries in the Middle East, including Israel and the U.A.E. Other targets of the cyber espionage activity likely include Turkey, India, and Albania, Google-owned Mandiant said in a new analysis. UNC1549 […]
Details have emerged about a now-patched vulnerability in Azure Service Fabric Explorer (SFX) that could lead to unauthenticated remote code execution. Tracked as CVE-2023-23383 (CVSS score: 8.2), the issue has been dubbed “Super FabriXss” by Orca Security, a nod to the FabriXss flaw (CVE-2022-35829, CVSS score: 6.2) that was fixed by Microsoft in October 2022. […]
A new critical remote code execution (RCE) flaw discovered impacting multiple services related to Microsoft Azure could be exploited by a malicious actor to completely take control of a targeted application. “The vulnerability is achieved through CSRF (cross-site request forgery) on the ubiquitous SCM service Kudu,” Ermetic researcher Liv Matan said in a report shared […]
Microsoft has incorporated additional improvements to address the recently disclosed SynLapse security vulnerability in order to meet comprehensive tenant isolation requirements in Azure Data Factory and Azure Synapse Pipelines. The latest safeguards include moving the shared integration runtimes to sandboxed ephemeral instances and using scoped tokens to prevent adversaries from using a client certificate to […]
Threat actors are actively incorporating public cloud services from Amazon and Microsoft into their malicious campaigns to deliver commodity remote access trojans (RATs) such as Nanocore, Netwire, and AsyncRAT to siphon sensitive information from compromised systems. The spear-phishing attacks, which commenced in October 2021, have primarily targeted entities located in the U.S., Canada, Italy, and […]
Researchers discovered a critical vulnerability in Microsoft Azure named “BlackDirect” that allows attackers to take over the Azure user’s accounts and creating the Token with the victim’s permissions. The vulnerability specifically affected Microsoft’s OAuth 2.0 applications that allow malicious attacker access and control a victim’s account “OAuth is a protocol for authorization that is commonly […]
A Linux-based AI camera using the Microsoft Azure service has been officially announced. Microsoft made the announcement of the $249 “Vision AI Developer Kit” in their official blog post. According to Microsoft, this Linux-based AI camera can recognize patterns, images, and moving objects. Microsoft Azure servers will provide Azure cloud processing for image processing tasks. […]
Recent research by ethical hacking specialists from Check Point Research revealed the existence of dozens of vulnerabilities in a commonly used protocol in Microsoft Azure. These flaws expose multiple cyberattacks to Microsoft cloud users. During their presentation at the Black Hat cybersecurity conference, experts noted that Remote Desktop Protocol (RDP) flaws, used to access other […]
It’s hard to argue with German authorities when their people’s privacy is concerned. On many occasions, Germany has valued its people’s rights on the Internet over striking deals with multinational data-sucking corporations. The German privacy watchdog has now banned Microsoft Office 365 in the state of Hesse over privacy concerns. In its statement, HBDI (Hesse […]
Microsoft is set to host its annual Build event on May 6, and before it, the Redmond company has unveiled its fully managed blockchain service in partnership with banking giant JP Morgan. To clear the air, Azure Blockchain Service is not to carry out cryptocurrency transactions, albeit an enterprise service meant for businesses to allow […]
Around 40% of Microsoft’s Azure VMs now run Linux distributions, according to a tweet made by Microsoft Developer UK twitter account, ZDNet reports. That information was retweeted by Linuxing community manager Brian Byrne. Did you know that 40% of #VirtualMachines in #Azure are running #Linux? #FutureDecoded #Dev pic.twitter.com/Ypb667Oa1L — Microsoft Developer (@msdevUK) October 31, 2017 Only […]
Short Bytes: A new report floating in the tech world suggests that Microsoft is busy headhunting the employees from well-known Linux firms. It’s being speculated that Redmond is doing this to make its Azure cloud strategy more effective by bringing open source tools on the platform. Over the course of past few months, we have […]
Microsoft Azure cloud platform is very popular among Linux users and now Microsoft has announced that it will be offering limited support to selected Linux distros and open source platforms. If you are finding it too had to believe, the exact words from Microsoft are: “limited support for major Linux distributions, third party and open […]