Hello and welcome to the Monday, February 9th,

2006 edition of the Sands Inite StormSaurus Stormcast.

My name is Johannes Ulrich,

recording today from Jacksonville, Florida.

And this episode is brought you by the Sands.edu

undergraduate certificate program in Applied Cybersecurity Security.

Let's start today with a couple of vulnerabilities in Microsoft's Azure Cloud.

There were actually four vulnerabilities that were being addressed late last week, and three of them are critical.

So I do want to point them out here specifically.

One is Azure front door. There is elevation of privilege vulnerability. Elevation of

privilege vulnerability in cloud solution, of course, always means cross-tenant possibilities here.

And yes, front door, that's Azure's CDN service.

The next one we have is in Azure Functions.

Azure Functions is the serverless feature in Azure Cloud.

So again, here, information disclosure vulnerability.

And then a second approach escalation vulnerability.

This one is in Azure Arc.

And that's sort of the cross-cloud admin platform.

I think that's how it's best described that Microsoft offers to its customers.

Good news, however, as typical for these kind of cloud software issues,

you as a customer don't really have to do anything.

Microsoft already mitigated these vulnerabilities.

...