1051 matches found
Threat matrix for storage services
The move to cloud is happening faster than ever before and organizations are increasing their dependency on cloud storage services. In fact, Microsoft Azure Storage services are one of the most popular services in the cloud. Companies need effective threat protection and mitigation strategies and...
KLA12123 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An unsigned code execution vulnerability in Azure Sphere can be exploited remotely to...
Vulnerability fixed in Microsoft Azure
A vulnerability has been fixed in Microsoft Azure. The vulnerability allows a malicious party to obtain sensitive data obtain sensitive data. Azure: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact |...
CVE-2021-24109
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability...
Privilege escalation
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability...
Release Information for Veeam Backup for Microsoft Azure v2
Requirements You can check your build number under Configuration | Support Information | About | Server version by clicking the gear icon at the top-right corner of the main menu in Veeam Backup for Microsoft Azure. After installing, your build number will be 2.0.0.303. What's New Veeam Backup fo...
Microsoft Defender for Endpoint: Why You May Need It and How to Export Hosts via API in Python
Hello everyone! In this episode, I want to talk about Microsoft Defender for Endpoint. It’s not a well-known free Defender antivirus built in Windows 10, but an enterprise level solution with the similar name. Yes, the naming is pretty confusing. I will not repeat Microsofts marketing thesis. Jus...
How to configure registry settings for Microsoft Azure Data Box device
Reference Article This article is referenced by the Veeam Backup & Replication User Guide. Adding Azure Data Box Storage: Before You Begin Before you add Microsoft Azure Data Box to the Veeam Backup & Replication backup infrastructure, create the following registry key on Veeam Backup Server: Key...
A playbook for modernizing security operations
The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest post from our new Voice of the Community blog series, Microsoft Product Marketing Manager Natalia Godyla talks with Dave Kennedy, Founder and...
Microsoft Azure IoT CLI Authorization Issues Vulnerability
Microsoft Azure IoT is a centralized managed service from Microsoft Corporation USA. for bi-directional communication between IoT applications and their managed devices. An authorization issue vulnerability exists in the Microsoft Azure IoT CLI. The following products and versions are affected:...
Microsoft Azure and Microsoft Azure Kubernetes Security Feature Issue Vulnerabilities
Microsoft Azure and Microsoft Azure Kubernetes are both products of Microsoft Corporation, U.S.A. Microsoft Azure is a suite of open, enterprise-class cloud computing platforms.Microsoft Azure Kubernetes is a fully managed Kubernetes service. Provides serverless Kubernetes, a consolidated...
KLA12074 PE vulnerabilities in Microsoft Azure
An elevation of privilege vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure IoT CLI extension can be exploited remotely to gain...
New Docker Container Escape Bug Affects Microsoft Azure Functions
Cybersecurity researcher Paul Litvak today disclosed an unpatched vulnerability in Microsoft Azure Functions that could be used by an attacker to escalate privileges and escape the Docker container used for hosting them. The findings come as part of Intezer Lab's investigations into the Azure...
KLA12038 SUI vulnerability in Microsoft Azure
A spoofing vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2021-1677 Related products Microsoft-Azure CVE list CVE-2021-1677 high KB list Solution Install necessary updates from the KB section, that are...
USN-4678-1: Linux kernel vulnerabilities
It was discovered that the AMD Running Average Power Limit RAPL driver in the Linux kernel did not properly restrict access to power data. A local attacker could possibly use this to expose sensitive information. CVE-2020-12912 Jann Horn discovered that the iouring subsystem in the Linux kernel d...
USN-4679-1: Linux kernel vulnerabilities
It was discovered that the console keyboard driver in the Linux kernel contained a race condition. A local attacker could use this to expose sensitive information kernel memory. CVE-2020-25656 Minh Yuan discovered that the tty driver in the Linux kernel contained race conditions when handling...
CVE-2020-35608
A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AFPACKET socket can cause a process to create an executable memory mapping with controllable content. An attacker can execute a shellcode that uses...
CVE-2020-35609
A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. A sequence of specially crafted ioctl calls can cause a denial of service. An attacker can write shellcode to trigger this vulnerability...
Denial of service
A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. A sequence of specially crafted ioctl calls can cause a denial of service. An attacker can write shellcode to trigger this vulnerability...
Remote code execution
A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AFPACKET socket can cause a process to create an executable memory mapping with controllable content. An attacker can execute a shellcode that uses...