Microsoft warns that pre-made Kubernetes deployment templates, including popular Helm charts, often prioritize convenience over security. Research identified vulnerabilities in projects like Apache Pinot, Meshery, and Selenium Grid, which expose services without proper authentication or ne...
Microsoft has identified Storm-1977, a threat actor targeting education sector cloud tenants through password spraying attacks using the "AzureChecker.exe" tool. The malware retrieves encrypted attack targets and processes username/password combinations. In one case, attackers exploited a ...
New cryptojacking campaign targets Docker environments by leveraging the Teneo decentralized network instead of traditional miners. Attackers deploy a container image with heavily obfuscated Python code that connects to teneo.pro, sending keep-alive pings to accumulate cryptocurrency rewar...
