Azure Linux 3.0 Security Update: mysql (CVE-2025-30693)

The version of mysql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-30693 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are...

Azure Linux 3.0 Security Update: mysql (CVE-2025-21575)

The version of mysql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21575 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Parser. Supported versions that...

Azure Linux 3.0 Security Update: mysql (CVE-2025-30704)

The version of mysql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-30704 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Components Services. Supported...

Azure Linux 3.0 Security Update: mysql (CVE-2024-20977)

The version of mysql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-20977 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions th...

Malicious code in azure-pipelines (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3befea97b94282d8ce4388e647f5f86caea89c7727ce5f913eb233b357335d0f Any computer that has this package installed or running should be considered...

MAL-2025-5180 Malicious code in azure-pipelines (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3befea97b94282d8ce4388e647f5f86caea89c7727ce5f913eb233b357335d0f Any computer that has this package installed or running should be considered...

MAL-2025-5066 Malicious code in vscode-azurestaticwebapps (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6d86e1274287895eb9b8f392467eb59e1636c384bc7d0b77c9a1da853b02963 Any computer that has this package installed or running should be considered...

Malicious code in vscode-azurecontainerapps (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ad54ec265645c2e7358384082a1b1f2385a1caa652b65c359b13681a211b30 Any computer that has this package installed or running should be considered...

Malicious code in azure-pipeline-filter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ccebaffafad34dc6e0db144fad37c055332951b9590769cbc852f2141a08d5a Any computer that has this package installed or running should be considered...

MAL-2025-4991 Malicious code in azure-pipeline-filter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ccebaffafad34dc6e0db144fad37c055332951b9590769cbc852f2141a08d5a Any computer that has this package installed or running should be considered...

TencentOS Server 3: grafana (TSSA-2023:0286)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0286 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

CVE-2025-22874 vulnerabilities

Vulnerabilities for packages: sbom-scorecard, otel-cli, govulncheck, nri-redis, gosu, bom, addon-resizer, sftpgo, trust-manager, step-ca, wuzz, minio, postgres-operator, amazon-k8s-cni, nsc, terraform-provider-sendgrid, whereabouts, dex, metallb, glow, velero-plugin-for-microsoft-azure,...

GHSA-6F52-WPX2-HVF2 vulnerabilities

Vulnerabilities for packages: sbom-scorecard, otel-cli, govulncheck, nri-redis, gosu, bom, addon-resizer, sftpgo, trust-manager, step-ca, wuzz, minio, postgres-operator, amazon-k8s-cni, nsc, terraform-provider-sendgrid, whereabouts, dex, metallb, glow, velero-plugin-for-microsoft-azure,...

GHSA-62JJ-GR2R-5C34 vulnerabilities

Vulnerabilities for packages: sbom-scorecard, otel-cli, govulncheck, nri-redis, gosu, bom, addon-resizer, sftpgo, trust-manager, step-ca, wuzz, minio, postgres-operator, amazon-k8s-cni, nsc, terraform-provider-sendgrid, whereabouts, dex, metallb, glow, velero-plugin-for-microsoft-azure,...

CVE-2025-4673 vulnerabilities

Vulnerabilities for packages: sbom-scorecard, otel-cli, govulncheck, nri-redis, gosu, bom, addon-resizer, sftpgo, trust-manager, step-ca, wuzz, minio, postgres-operator, amazon-k8s-cni, nsc, terraform-provider-sendgrid, whereabouts, dex, metallb, glow, velero-plugin-for-microsoft-azure,...

Azure Linux 3.0 Security Update: coreutils (CVE-2016-2781)

The version of coreutils installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2016-2781 advisory. - chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via...

Over 80,000 Microsoft Entra ID Accounts Targeted Using Open-Source TeamFiltration Tool

Cybersecurity researchers have uncovered a new account takeover ATO campaign that leverages an open-source penetration testing framework called TeamFiltration to breach Microsoft Entra ID formerly Azure Active Directory user accounts. The activity, codenamed UNKSneakyStrike by Proofpoint, has...

How to Use Veeam Data Cloud Vault with ExpressRoute with Private Peering

Purpose This article documents the usage of Veeam Data Cloud Vault within environments that use Azure ExpressRoute with private peering. Solution Software Prerequisites Veeam Backup & Replication v12.3 or higher Veeam Data Cloud Vault Configuration Notes This article covers customers using...

@nx/powerpack-azure-cache (>=1.3.0-beta.1, <=21.0.0-beta.0) potentially affected by CVE-2025-36852 via @nx/azure-cache (>=1.3.0, <=21.0.0-beta.0)

@nx/azure-cache NPM version =1.3.0, =1.3.0-beta.1, =21.0.0-beta.0 Source cves: CVE-2025-36852 Source advisory: SNYK:JS-NXAZURECACHE-13559382...

2025-06 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5060525)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...