PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Azure Cloud Configuration Review

hackerone.com | blog | #cloud | #cloud-security | #pentesting | #entra-id | #azure | #ptaas | #hackerone | #misconfiguration | #configuration-review | #ptes
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne outlines Azure configuration review methodology based on PTES, CIS Azure Benchmarks, and Well-Architected Framework, covering Entra ID misconfigurations and shared responsibility pitfalls.
Published
Collected

Related coverage

blog · aikido.dev
Adding Aikido AI pentesting to your existing security stack
How to add Aikido's AI pentesting on top of the SAST, SCA and cloud tools you already run, from your first pentest through whitebox testing, continuous testing and remediation.
blog · vercel.com
Mitigating Denial of Wallet risks with Vercel
Protect against Denial of Wallet (DoW) attacks with Vercel. DoW exploits cloud scalability to inflate costs. Vercel provides solutions like budget alerts, spend limits, and anomaly detection to safeguard workloads and maintain financial stability.
blog · vercel.com
Introducing Vercel Firewall and Vercel Secure Compute
Vercel Secure Compute and Vercel Firewall for enhanced protection of your applications on the frontend cloud
blog · netspi.com
Your Cloud Assets are Probably Not as Secure as You Think They Are
Gartner attributes up to 95% of cloud breaches to human configuration errors; NetSPI catalogs usual suspects like missing MFA, cloud-on-prem integration, and over-permissioned accounts.
blog · specterops.io
Head in the Clouds: Microsoft Azure
# Head in the Clouds: Microsoft Azure Author Christopher Maddalena Read Time 8 mins Published Sep 16, 2018 ##### Share * Introduction * Head in the Clouds – Christopher Maddalena – Medium * In the...
blog · netspi.com
Anonymously Enumerating Azure File Resources
Karl Fosaaen explores anonymous enumeration of Azure blob storage, explaining container access policies and releasing tooling to find publicly exposed blobs holding configs, backups, and credentials.
Back