Tag Archives: Azure

OMIGOD: IBM QRadar Azure vulnerable via CVE-2021-38647

Posted on 2021-10-04 by guenni

[German]IBM warns that QRadar Azure  warn is vulnerable to remote attacks via the OMIGOD vulnerability CVE-2021-38647. Remote attackers could execute arbitrary code. This would have a similar impact to the supply chain attack on Kaseya VSA, a remote management and … Continue reading →

Posted in Cloud, Security | Tagged , | Leave a comment
Advertising

Patch Microsoft Azure vulnerabilities OMIGOD in Linux VMs

Posted on 2021-09-15 by guenni

[German]Those responsible for Linux VMs under Microsoft Azure need to react immediately. Management agents have been silently installed, that have RCE and LPE vulnerabilities. The vulnerability, called OMIGOD, must be patched manually because there is no Azure update mechanism. Advertising

Posted in Cloud, Linux, Security, Update | Tagged , , , , | Leave a comment

How to find weak passwords in Active Directory and eliminate them with PowerShell

[Sponsored Post]Weak or compromised passwords are a known gateway for attackers. If you are able to identify which users in Active Directory (AD) are threatened by this, then PowerShell can help to remedy it. However, PowerShell scripts cannot eliminate basic AD deficits, other tools are needed for this. More ...

eBook: Azure defenses for ransomware attacks

Posted on 2021-09-12 by guenni

[German]Microsoft has published an eBook that provides key native Azure capabilities and defenses for ransomware attacks, as well as guidance on how to proactively use these capabilities to protect your assets in the Azure cloud. This eBook can be obtained … Continue reading →

Posted in Cloud, Security | Tagged , | Leave a comment
Advertising

Next Azure container vulnerability allowed data theft

Posted on 2021-09-09 by guenni

[German]Microsoft issued a warning to its Azure customers about a security vulnerability that could have allowed hackers to access data. The punchline: It involved containers whose code had a known vulnerability that had not been patched. Microsoft has now updated … Continue reading →

Posted in Cloud, Security | Tagged , , | Leave a comment

Microsoft Azure: API changes kills applications and PowerShell scripts

Posted on 2021-09-06 by guenni

[German]Microsoft wants to make changes to the Azure API. This will impact applications and PowerShell scripts that rely on this API. The date for the API change is July 1, 2022, might want to keep that in mind if you … Continue reading →

Posted in Cloud | Tagged , | Leave a comment
Advertising

Why you shouldn't use Azure AD Domain Services as a Windows AD replacement

Posted on 2021-08-29 by guenni

[English]When migrating on-premises Windows servers to the cloud or hybrid solutions, one might get the idea of replacing Windows Active Directory (AD) with Azure AD Domain Services. Should be reconsidered though. Advertising

Posted in Cloud, Windows | Tagged , | Leave a comment

Azure App Service: Java 7 support ends July 29, 2022

Posted on 2021-08-29 by guenni

[English]I don't know if there are people reading this who are responsible for Java support in applications. But in less than a year, support for Java 7 in Microsoft Azure will end. Community support for Java 7 currently ends on … Continue reading →

Posted in Cloud | Tagged , | Leave a comment

Azure: Thousands of customers threatened by ChaosDB vulnerability in Azure Cosmos DB

Posted on 2021-08-27 by guenni

[German]Heavy blow for users of the Microsoft Azure cloud if a Cosmos DB is involved (the DB stands for Data Breach, just no one has noticed yet). There was a severe vulnerability (now closed) that allowed attackers to take over … Continue reading →

Posted in Cloud, Security | Tagged , , | Leave a comment
Advertising

Azure AD Connect 2.0.10.0 released as Hotfix

Posted on 2021-08-23 by guenni

[German]Brief note to administrators who are also responsible for Microsoft Azure. Microsoft has released Azure AD Connect 2.0.10.0. This is intended as a hotfix to work around issues that occur when renaming a domain. Advertising

Posted in Cloud, Software | Tagged , , | Leave a comment

Microsoft Azure: Urgently update PowerShell because of RCE vulnerability

Posted on 2021-07-08 by guenni

[German]PowerShell versions 7.0 and 7.1 contain a remote code execution (RCE) vulnerability CVE-2021-26701, which has been assigned a CVSS score: 8.1. In a security alert, Microsoft is urging Azure customers to update PowerShell to version 7.0.6 or 7.1.3 in a … Continue reading →

Posted in Cloud, Security, Update | Tagged , , , | Leave a comment