Microsoft recently patched three vulnerabilities in its Azure API Management service, two of which enabled server-side request forgery (SSRF) attacks that could have allowed hackers to access internal ...

Most organisations don't struggle with cloud security because they lack good advice. They struggle because the pace of change makes it hard to apply that advice consistently. New Azure services are ...

While DevOps drives innovation and simplifies collaboration, it also comes with its own set of risks and vulnerabilities. Developers rely on Git-based platforms like GitHub, Azure DevOps, Bitbucket, ...

Microsoft has improved its preview of the Azure Active Directory Identity Protection service for federated tenants and also expanded the preview to Europe. Microsoft first rolled out a preview of the ...

Dubbed OMIGOD, a series of vulnerabilities in the Open Management Infrastructure used in Azure on Linux demonstrate hidden security threats, researchers said. Four Microsoft zero-day vulnerabilities ...

The Azure Active Directory (AD) Password Protection feature which blocks commonly used and compromised passwords to dramatically reduce the risks raised by password spray attacks is now generally ...

According to the Microsoft email describing the problem to affected customers, "Microsoft has recently become aware of a vulnerability in Azure Cosmos DB that could potentially allow a user to gain ...

Government and private organizations, including Microsoft, have released a wealth of information and tools to assess risk from SolarWinds-like attacks. One silver lining that has come out of the ...

Microsoft has expanded the features of its Azure Active Directory Identity Protection service and has made the preview available in Europe. Microsoft first rolled out a preview of the Azure AD ...