Microsoft Says Azure Outage Caused by DDoS Attack Response

July 31, 2024 at 09:08AM Microsoft’s response to a DDoS attack caused outages for Azure services affecting numerous customers. The 10-hour outage impacted various organizations, including water utilities and banks. Microsoft attributed the issue to an unexpected usage spike and an implementation bug in its defense mechanisms. The company has committed to publishing a review … Read more

Microsoft paid Tenable a bug bounty for an Azure flaw it says doesn’t need a fix, just better documentation

June 5, 2024 at 02:48AM A vulnerability in Microsoft’s Azure cloud allows potential access to other users’ private web resources. The issue stems from Service Tags, potentially allowing cross-tenant attacks. Despite Microsoft’s initial refusal to classify it as a vulnerability, it confirmed the flaw and offered a bug bounty. Subsequently, Microsoft decided to address the … Read more