Tag Archives: azure

Microsoft EU cloud revisions just so happen to exclude Google, Amazon

Enlarge / Microsoft says its latest cloud licensing terms are meant to give customers more flexibility and cost control—just not on Amazon, Google, or Alibaba servers. Getty Images reader comments 34 with 28 posters participating Share this story Facing European antitrust scrutiny, Microsoft has made it easier to virtualize its software on non-Microsoft cloud infrastructure—just… Read More »

Microsoft’s tactics to win cloud battle lead to new antitrust scrutiny

Aurich Lawson | Getty Images reader comments 20 with 18 posters participating Share this story Microsoft has escaped the recent backlash against the power and wealth of the biggest US tech companies. Despite a stock market value that has soared to more than $2 trillion on its dominance of various parts of the business software… Read More »

PoC exploit released for Azure AD brute-force bug—here’s what to do

reader comments 20 with 16 posters participating Share this story A public proof-of-concept (PoC) exploit has been released for the Microsoft Azure Active Directory credentials brute-forcing flaw discovered by Secureworks and first reported by Ars. The exploit enables anyone to perform both username enumeration and password brute-forcing on vulnerable Azure servers. Although Microsoft had initially… Read More »

New Azure Active Directory password brute-forcing flaw has no fix

reader comments 8 with 8 posters participating Share this story Imagine having unlimited attempts to guess someone’s username and password without getting caught. That would make an ideal scenario for a stealthy threat actor—leaving server admins with little to no visibility into the attacker’s actions, let alone the possibility of blocking them. A newly discovered… Read More »

Security researchers at Wiz discover another major Azure vulnerability

Enlarge / This isn’t how the OMIGOD vulnerability works, of course—but lightning is much more photogenic than maliciously crafted XML. reader comments 31 with 20 posters participating, including story author Share this story Cloud security vendor Wiz—which recently made news by discovering a massive vulnerability in Microsoft Azure’s CosmosDB-managed database service—has found another hole in Azure.… Read More »

“Worst cloud vulnerability you can imagine” discovered in Microsoft Azure

Enlarge / Cosmos DB is a managed database service offering—including both relational and noSQL data structures—belonging to Microsoft’s Azure cloud infrastructure. reader comments 44 with 22 posters participating, including story author Share this story Cloud security vendor Wiz announced yesterday that it found a vulnerability in Microsoft Azure’s managed database service, Cosmos DB, that granted… Read More »

Microsoft boots apps out of Azure used by China-sponsored hackers

Enlarge / Computer chip with Chinese flag, 3d conceptual illustration. reader comments 74 with 43 posters participating Share this story Fortune 500 companies aren’t the only ones flocking to cloud services like Microsoft Azure. Increasingly, hackers working on behalf of the Chinese government are also hosting their tools in the cloud, and that’s keeping people… Read More »