WALinuxAgent bug fix and enhancement update

The Microsoft Azure Linux Agent supports the provisioning and running of Linux virtual machines in the Microsoft Azure cloud. WALinuxAgent has been rebased to upstream version 2.2.49 BZ1896907 Additional bug fixes and enhancements: Miss report "hostnamectl set-hostname --static failed, attempting...

WALinuxAgent bug fix and enhancement update

An update is available for WALinuxAgent. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Microsoft Azure Linux Agent supports the provisioning and running of...

KLA12172 OSI vulnerability in Microsoft Azure

An information disclosure vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2021-31936 Related products Microsoft-Access CVE list CVE-2021-31936 high KB list Solution Install necessary updates from t...

Microsoft Azure和Microsoft Azure Stack 安全漏洞

Microsoft Azure and Microsoft Azure Stack are both products of Microsoft Corporation, USA.Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms.Microsoft Azure Stack is a hybrid cloud computing software solution based on the Azure cloud platform. . The product supports...

Sensitive source codes exposed in Microsoft Azure Blob account leak

By Habiba Rashid The research team at vpnMentor, who discovered the data, believes that it belongs to Microsoft. Here's what was leaked and what we know so far. This is a post from HackRead.com Read the original post: Sensitive source codes exposed in Microsoft Azure Blob account leak...

Microsoft Azure RTOS NetX Denial of Service Vulnerability

Microsoft Azure RTOS NetX is part of ThreadX RTOS, an open source project maintained by Microsoft. Microsoft Azure RTOS NetX has a denial of service vulnerability that can be exploited by an attacker to cause an infinite loop...

Vulnerability Spotlight: Multiple remote code execution vulnerabilities in Microsoft Azure Sphere

Claudio Bozzato and Lilith of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos researchers recently discovered multiple vulnerabilities in Microsoft’s Azure Sphere, a cloud-connected and custom SoC platform designed specifically with IoT application security... This ...

Microsoft Azure DevOps Server 2020.0.1 Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Reflected cross-site scripting product: Microsoft Azure DevOps Server vulnerable version: 2020.0.1 fixed version: 2020.0.1 Patch 2 CVE number: CVE-2021-28459 impact: medi...

CVE-2021-28458

Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability...

KLA12140 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An unsigned code execution vulnerability in Azure Sphere can be exploited remotely to execute...

Microsoft Azure Sphere mqueue inode initialization kernel code execution vulnerability

Summary A code execution vulnerability exists in the mqueue inode initialization functionality of Microsoft Azure Sphere 21.01. A specially crafted set of syscalls can lead to uninitialized kernel read, which in turn leads to code execution in kernel. To trigger this vulnerability, an attacker ca...

Microsoft Azure Sphere Linux namespace ptrace unsigned code execution vulnerability

Summary An unsigned code execution vulnerability exists in the Linux namespace ptrace functionality of Microsoft Azure Sphere 21.01. Specially crafted shellcode could allow an adversary to execute unsigned code. An attacker can change the namespace and use ptrace to modify the code of a running...

Microsoft Azure Sphere mount namespace unsigned code execution vulnerability

Summary An unsigned code execution vulnerability exists in the mount namespace functionality of Microsoft Azure Sphere 21.01. A specially crafted shellcode could allow an adversary to execute an arbitrary binary in a tmpfs mount, leading to unsigned code execution. An attacker can switch to a new...

Threat matrix for storage services

The move to cloud is happening faster than ever before and organizations are increasing their dependency on cloud storage services. In fact, Microsoft Azure Storage services are one of the most popular services in the cloud. Companies need effective threat protection and mitigation strategies and...

KLA12123 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An unsigned code execution vulnerability in Azure Sphere can be exploited remotely to...

Vulnerability fixed in Microsoft Azure

A vulnerability has been fixed in Microsoft Azure. The vulnerability allows a malicious party to obtain sensitive data obtain sensitive data. Azure: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact |...

CVE-2021-24109

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability...

Privilege escalation

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability...

Release Information for Veeam Backup for Microsoft Azure v2

Requirements You can check your build number under Configuration | Support Information | About | Server version by clicking the gear icon at the top-right corner of the main menu in Veeam Backup for Microsoft Azure. After installing, your build number will be 2.0.0.303. What's New Veeam Backup fo...

Microsoft Defender for Endpoint: Why You May Need It and How to Export Hosts via API in Python

Hello everyone! In this episode, I want to talk about Microsoft Defender for Endpoint. It’s not a well-known free Defender antivirus built in Windows 10, but an enterprise level solution with the similar name. Yes, the naming is pretty confusing. I will not repeat Microsofts marketing thesis. Jus...