🧰 Azure

The items that name it 60

• [tl;dr sec] #352 - Unprompted Slides, AWS AI Post-compromise Trends, Malicious LLM API Routers
  articleas classification.technologies2026-10-29
• DFIR Radar (@DFIR_Radar) on X
  threadas classification.technologies2026-10-19
• The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
  articleas classification.technologies2026-10-14
• Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages
  articleas classification.technologies2026-10-14
• Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
  articleas affected products2026-10-14
• Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
  advisoryas classification.technologies2026-10-13
• CISO perspectives on managing vulnerability risks in the age of AI
  articleas classification.technologies2026-10-06
• GPT-6.1 Sol on Codex: Astra-level security, a third faster, zero cheating | Blog | Endor Labs
  writeupas classification.technologies2026-10-02
• Binary Security: Azure Logic Apps cross-tenant compromises (One Root Case)
  writeupas classification.technologies2026-10-02
• GPT-6 Sol on Codex: average scores, quarter the cost | Blog | Endor Labs
  articleas classification.technologies2026-10-01
• Check Point Research — 28th September Threat Intelligence Report
  articleas classification.technologies2026-09-28
• Storm-3168: Agentic-driven cloud attacks using compromised service principals
  writeupas classification.technologies2026-09-25
• The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environments
  writeupas classification.technologies2026-09-25
• Incident Automation: Benefits, Tools & Best Practices
  articleas affected products2026-09-09
• Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
  advisoryas classification.technologies2026-09-08
• Patch Tuesday - September 2026
  advisoryas classification.technologies2026-09-08
• The Crypto Wallet That Never Opened: Tampered Exodus Installer Hides a Modular RAT
  writeupas classification.technologies2026-09-01
• When AI infrastructure becomes the target: Securing gateways and control points | Microsoft Security Blog
  articleas classification.technologies2026-08-26
• Submap
  toolas classification.technologies2026-08-25
• How to Spot and Stop Rogue Device Joins
  writeupas classification.technologies2026-08-18
• We built an AI PR reviewer. The hard part was teaching it to say nothing.
  writeupas classification.technologies2026-08-13
• ARTOC by White Knight Labs - Review
  articleas tools2026-08-06

  Platform for setting up redirectors

• Cloud Threat Highlights: H1 2026
  writeupas affected products2026-08-06

  Cloud platform targeted by JINX-0163 and Miasma's cloud-identity collectors; VM Run Command API abuse observed in Azure Activity Logs.

• Orca Security: Cloud Identity & Entitlement Management Series
  articleas affected products2026-07-31

  Cloud platform with its own IAM model, subject to entitlement sprawl

• vigneshwaran1702/Cloud-Security-Scanner
  repoas classification.technologies2026-07-31
• User Accounts and Privilege Management
  articleas classification.technologies2026-07-27
• Master Urlscan.io Dorking for Bug Bounty Hunting
  videoas technologies2026-07-23
• Find Unused, Stale, and OIDC-Replaceable GitHub Actions Secrets Across Your GitHub Organization
  articleas classification.technologies2026-07-23
• HackingLZ/gibson
  repoas classification.technologies2026-07-22
• Solving GitHub's Secure Code game with an AI red teaming agent
  writeupas classification.technologies2026-07-17
• promptfoo
  repoas classification.technologies2026-07-14
• Azure/PyRIT
  repoas classification.technologies2026-07-14
• jscrambler npm Package Compromised in Supply Chain Attack
  writeupas affected products2026-07-11

  IMDS endpoint 169.254.169.254 and management.azure.com targeted

• The Two Mitigations for the Service-Account Confused Deputy in the Cloud
  articleas classification.technologies2026-07-09
• Microsoft's durabletask PyPI Package Compromised in Supply Chain Attack
  writeupas classification.technologies2026-06-09
• Miasma Worm Hits Microsoft Again: Azure Functions Action and 72 Other Repositories Disabled After Supply Chain Attack Targeting AI Coding Agents
  writeupas classification.technologies2026-06-09
• Miasma Blight Reaches Microsoft: 73 Repos Disabled in 105 Seconds
  writeupas classification.technologies2026-06-06
• Why EDR and proxy won’t save you from supply chain malware
  articleas affected products2026-06-02

  Credentials harvested by durabletask second-stage payload

• Orca Security: Securing Shadow AI: How to Detect Unapproved LLMs in Your Cloud
  articleas affected products2026-06-01

  Cloud environment covered by Orca's AI-SPM

• State of Post Quantum Cryptography | Wiz Blog
  articleas classification.technologies2026-05-28
• XBOW: Ethical Considerations in AI-Driven Penetration Testing
  articleas affected products2026-05-23

  Cloud environment autonomous AI pentesting agents may interact with when in scope

• Orca Security: Critical Coder Signature Bypass Exposes Developer Keys and Tokens
  advisoryas classification.technologies2026-05-22
• Alice and Bob Learn Secure Coding: Chapter 2
  videoas technologies2026-05-11
• When Prompts Become Shells: RCE Vulnerabilities in AI Agent Frameworks (Semantic Kernel)
  writeupas classification.technologies2026-05-07
• OpenClaw, Rogue Agents, and Application Hygiene
  writeupas classification.technologies2026-04-01
• Azure Storage Account Attacks and Detections
  writeupas classification.technologies2025-12-15
• Datacenter Infrastructure & Identity Attacks
  writeupas classification.technologies2025-12-02
• 6 Months of Researching OAuth Application Attacks | Huntress
  writeupas classification.technologies2025-02-10
• Device Code Phishing: OAuth 2.0 Attacks in Google & Azure
  writeupas classification.technologies2025-02-06
• Optimizing the SOC
  articleas classification.technologies2024-12-07
• Today I Learned - NSG Flow Log
  writeupas classification.technologies2024-09-21
• Stack Your Deception: Stacking MDE Deception Rules with Thinkst Canarytokens
  writeupas classification.technologies2024-04-21
• Azure Batch Misused for Crypto Mining
  writeupas classification.technologies2024-03-15
• Penetration testing Azure for ethical hackers (book review)
  writeupas classification.technologies2022-06-05
• Azure Virtual Machine Execution Techniques
  writeupas classification.technologies2022-05-04
• PowerZure 2.1 Update
  articleas classification.technologies2021-12-21
• Abusing and Detecting Alternative Data Channel Command Execution on Azure Virtual Machines
  writeupas classification.technologies2021-12-03
• Attacking Azure & Azure AD, Part II
  writeupas affected products2021-10-26

  Azure resource platform (subscriptions, resource groups, resources) with separate RBAC from Azure AD

• Lonkero — Rust web vulnerability scanner (v3.7, AI agent mode)
  repoas affected products

  Cloud platform fingerprinting, incl. Azure APIM cross-tenant bypass and Azure AD OIDC provider

• DEF CON® 34 Hacking Conference - Main Stage Talks
  otheras classification.technologies