SEARCH
Archive
Researchers Warn of Potential Abuse of Azure Service Tags
Tenable researchers discovered a technique for abusing Azure service tags to bypass firewall rules and Microsoft has issued new guidance for customers.
Microsoft Azure Serial Console Abused in UNC3944 Attacks
An UNC3944 attack highlights how threat actors can abuse legitimate cloud resources for various purposes after compromising the Azure administrator's account.
Microsoft Discloses Previously Fixed Azure Synapse Bug
Microsoft quietly fixed the elevation of privilege flaw in June.
Azure OMIGOD Flaw Under Attack
The Azure OMI vulnerability (CVE-2021-38647) is under attack by several threat actors, including the Mirai botnet operators.
Attackers Verify O365 Credentials On Microsoft Entra ID
Attackers are cross-checking stolen Office 365 credentials on Microsoft Entra ID in real-time after victims type them into a malicious phishing page, researchers from Armorblox said.