Azure security

Flowchart showing attack steps from anonymous attacker discovering target via Shodan to creating developer account and exfiltrating data

Azure APIM Signup Bypass: 97.9% of Developer Portals Still Exploitable Anonymously and from the Internet

| | API Management Security, API security, authentication bypass, Azure APIM, Azure security, Cloud Security, Cross-Tenant Attack, Developer Portal, Internet-Facing Vulnerability, Microsoft Azure, MSRC Response, Offensive Security, open source, Tools & Techniques, Vulnerability Research
The Azure APIM signup bypass is a critical vulnerability affecting 97.9% of internet-facing Developer Portals. Azure API Management (APIM) exposes APIs to external consumers through a Developer Portal, the interface where developers ...
Offensive Security Blog: Latest Trends in Hacking | Praetorian
A single, juicy raspberry on a plain, white background

Biden Review Board Gives Microsoft a Big, Fat Raspberry

| | Active Directory, Authentication, azure, Azure Active Directory, Azure AD, Azure security, cisa, CISA.gov, CSRB, Cyber Safety Review Board, Cybersecurity Infrastructure Security Administration, Entra ID, Exchange, Microsoft, Microsoft Azure, Microsoft Azure Active Directory, Microsoft Azure Security, Outlook.com, SB Blogwatch, Storm-0558
Storm-0558 forecast: Last year’s Chinese hack of federal agencies’ email is still a mystery, and “should never have occurred,” says CISA ...
Security Boulevard
Satya Nadella, with caption quote: “Culture of toxic obfuscation”

Microsoft is a “Strategic Problem in the Security Space,” Says CEO

| | Amit Yoran, azure, Azure Active Directory, Azure AD, Azure security, Microsoft, Microsoft Azure, Microsoft Azure Active Directory, Microsoft Azure Security, SB Blogwatch, Tenable
Fist of FAIL: Tenable CEO Amit Yoran has had enough—and he’s not gonna take it anymore. Satya Nadella (pictured) can’t be happy ...
Security Boulevard