Security News

Azure, Microsoft 365 MFA outage locks out users across regions
2025-01-13 17:55

It's fixed, mostly, after Europeans had a manic Monday Microsoft's multi-factor authentication (MFA) for Azure and Microsoft 365 (M365) was offline for four hours during Monday's busy start for...

Microsoft Sues Hacking Group Exploiting Azure AI for Harmful Content Creation
2025-01-11 07:54

Microsoft has revealed that it's pursuing legal action against a "foreign-based threat–actor group" for operating a hacking-as-a-service infrastructure to intentionally get around the safety...

Misconfigured Kubernetes RBAC in Azure Airflow Could Expose Entire Cluster to Exploitation
2024-12-31 04:35

Cybersecurity researchers have uncovered three security weaknesses in Microsoft's Azure Data Factory Apache Airflow integration that, if successfully exploited, could have allowed an attacker to...

Don't fall for a mail asking for rapid Docusign action – it may be an Azure account hijack phish
2024-12-19 05:30

Recent campaign targeted 20,000 folk across UK and Europe with this tactic, Unit 42 warns Unknown criminals went on a phishing expedition that targeted about 20,000 users across the automotive,...

HubSpot phishing targets 20,000 Microsoft Azure accounts
2024-12-18 18:41

A phishing campaign targeting automotive, chemical, and industrial manufacturing companies in Germany and the UK is abusing HubSpot to steal Microsoft Azure account credentials. [...]

Microsoft warns Azure Virtual Desktop users of black screen issues
2024-11-01 23:20

Microsoft warned customers they might experience up to 30 minutes of black screens when logging into Azure Virtual Desktop (AVD) after installing the KB5040525 Windows 10 July 2024 preview update. [...]

AWS, Azure auth keys found in Android and iOS apps used by millions
2024-10-22 20:19

Multiple popular mobile applications for iOS and Android come with hardcoded, unencrypted credentials for cloud services like Amazon Web Services (AWS) and Microsoft Azure Blob Storage, exposing...

Microsoft creates fake Azure tenants to pull phishers into honeypots
2024-10-19 14:32

Microsoft is using deceptive tactics against phishing actors by spawning realistic-looking honeypot tenants with access to Azure and lure cybercriminals in to collect intelligence about them. [...]

Ransomware gangs now abuse Microsoft Azure tool for data theft
2024-09-17 16:14

Ransomware gangs like BianLian and Rhysida increasingly use Microsoft's Azure Storage Explorer and AzCopy to steal data from breached networks and store it in Azure Blob storage. [...]

Researchers Uncover TLS Bootstrap Attack on Azure Kubernetes Clusters
2024-08-20 09:36

Cybersecurity researchers have disclosed a security flaw impacting Microsoft Azure Kubernetes Services that, if successfully exploited, could allow an attacker to escalate their privileges and...