Browsing Tag
Azure
19 posts
AuthQuake Flaw Allowed MFA Bypass Across Azure, Office 365 Accounts
SUMMARY Cybersecurity researchers at Oasis Security have identified a vulnerability in Microsoft’s Multi-Factor Authentication (MFA), known as AuthQuake,…
December 11, 2024
Azure AI Vulnerabilities Allowed Attacks to Bypass Moderation Safeguards
Mindgard researchers uncovered critical vulnerabilities in Microsoft’s Azure AI Content Safety service, allowing attackers to bypass its safeguards…
November 1, 2024
Shadow IT: Personal GitHub Repos Expose Employee Cloud Secrets
Alerted by a recent discovery of employee personal GitHub repos exposing internal Azure and Red Hat secrets, this article dives into the dangers of Shadow IT and offers solutions to prevent cloud credential leaks and secure your cloud environment.
May 16, 2024
Findings Show MFA Bypass in Microsoft Azure Entra ID Using Seamless SSO
Concerned about a potential MFA bypass in Microsoft Azure Entra ID? This article explores the research, explains the vulnerability in context, and offers actionable steps to secure your organization.
May 8, 2024
Microsoft: Storm-1283 Sent 927,000 Phishing Emails with Malicious OAuth Apps
Cloud Security Shakeup: Experts Urge Caution as OAuth Becomes Hacker Playground.
December 14, 2023
Microsoft Azure Exploited to Create Undetectable Cryptominer
esearchers have labeled this as the "ultimate cryptominer."
November 8, 2023
Reply URL Flaw Allowed Unauthorized MS Power Platform API Access
Critical Vulnerability in Microsoft Power Platform Discovered and Reported by Secureworks Researchers.
August 28, 2023
Vulnerability Enabled Bing.com Takeover, Search Result Manipulation
Cybersecurity researchers at Wiz reported the vulnerability to Microsoft and dubbed the attack “BingBang”.
March 30, 2023
Microsoft Down – Xbox, Azure, MS365 and MS Teams Down
The service outage began on Wednesday, January 25th, 2023, at around 8:30 AM, Greenwich Mean Time (GMT).
January 15, 2023
Microsoft Exposed 2.4 TB of Business Customer Data in BlueBleed Breach
According to researchers, the data included 335,000 emails, 548,000 users, and 133,000 projects.
October 20, 2022