Azure
Security incidents tagged Azure. Newest first.
0 Azure incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 1131
- Longest quiet run: 1131 days (Sep 19–Oct 23)
Show 2 older incidents2 older incidents
June 2023 1
PatchedMicrosoft AI researchers exposed 38TB via an over-permissive Azure SAS link
Microsoft Azure Storage (SAS token in a GitHub repo)
A public GitHub repo of Microsoft AI training models shared an Azure Storage SAS token with full-control permissions on a whole storage account. It exposed 38TB of internal data, including workstation backups, secrets and Teams messages. Wiz found and reported it.
May 2023 1
- Patched
Storm-0558: stolen Microsoft signing key used to read government email
China-based Storm-0558 used a stolen Microsoft consumer (MSA) signing key, plus a token validation bug, to forge tokens and read Exchange Online and Outlook.com mail at about 25 organisations, including US government agencies. Microsoft later said the key leaked through a 2021 crash dump.
Microsoft Exchange Online / Outlook.com (Azure AD and MSA token signing)Closed Sep 6, 2023
