13707 matches found
February 13, 2024—KB5034830 (Monthly Rollup)
None None...
February 13, 2024—KB5034819 (Monthly Rollup)
None None...
Why keeping track of user accounts is important
CISA the Cybersecurity & Infrastructure Security Agency has issued a cybersecurity advisory after the discovery of documents containing host and user information of a state government organization’s network environment—including metadata—on a dark web brokerage site. An attacker managed to...
The vulnerability of the integrated Azure Stack Hub hybrid computing system, related to information representation errors in the user interface, allows attackers to perform spoofing attacks.
The vulnerability of the integrated Azure Stack Hub hybrid computing system is related to errors in information representation by the user interface. Exploiting this vulnerability could allow a malicious actor to carry out spoofing attacks remotely...
AzSubEnum - Azure Service Subdomain Enumeration
AzSubEnum is a specialized subdomain enumeration tool tailored for Azure services. This tool is designed to meticulously search and identify subdomains associated with various Azure services. Through a combination of techniques and queries, AzSubEnum delves into the Azure domain structure,...
U.S. State Government Network Breached via Former Employee's Account
The U.S. Cybersecurity and Infrastructure Security Agency CISA has revealed that an unnamed state government organization's network environment was compromised via an administrator account belonging to a former employee. "This allowed the threat actor to successfully authenticate to an internal...
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (Azure) vulnerabilities (USN-6626-3)
The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6626-3 advisory. Quentin Minster discovered that a race condition existed in the KSMBD implementation in the Linux kernel when handling sessions operations. A...
USN-6626-3: Linux kernel (Azure) vulnerabilities
Quentin Minster discovered that a race condition existed in the KSMBD implementation in the Linux kernel when handling sessions operations. A remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-32250, CVE-2023-32252, CVE-2023-32257...
Security Updates for Microsoft Team Foundation Server and Azure DevOps Server (February 2024)
The Microsoft Team Foundation Server or Azure DevOps install is missing security updates. It is, therefore, affected by a remote code execution vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...
The vulnerability of the Azure DevOps Server software lies in insufficient validation of input data, allowing a hacker to execute arbitrary code.
The vulnerability of the Azure DevOps Server software lies in insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
CVE-2024-21403
Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability...
CVE-2024-21397
Microsoft Azure File Sync Elevation of Privilege Vulnerability...
CVE-2024-21397
Microsoft Azure File Sync Elevation of Privilege Vulnerability...
CVE-2024-21403
Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability...
CVE-2024-21381
Microsoft Azure Active Directory B2C Spoofing Vulnerability...
CVE-2024-21376
Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability...
CVE-2024-21376
Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability...
CVE-2024-21364
Microsoft Azure Site Recovery Elevation of Privilege Vulnerability...