article thumbnail

Securing Azure Service Bus

Xebia

Let’s examine common security risks, understand the importance of data encryption and various robust authentication methods such as Azure AD and shared access signatures, explore strategies for network protection, and emphasize the value of logging for enhanced oversight. By default, Azure Service Bus supports TLS 1.2

Azure 162
article thumbnail

ApatchMe - Authenticated Stored XSS Vulnerability in AWS and GCP Apache Airflow Services

Tenable

Microsoft Azure also uses vulnerable managed Apache Airflow instances in its Data Factory service. While the specific version Azure uses was found to be vulnerable, we deemed it to be non-exploitable. First, we noticed that all managed Apache Airflow image versions that cloud providers AWS, Azure and GCP were deploying were vulnerable.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

All the Small Things: Azure CLI Leakage and Problematic Usage Patterns

Prisma Clud

At the beginning of July 2023, I took a stroll around the azure/login GitHub Action repository. The issue was titled “ SECURITY: Azure/login in some cases leaks Azure Application Variables to the GitHub build log ”. Figure 1: Security issue reported in the Azure/login project Well this is pretty straight forward, I thought.

Azure 143
article thumbnail

InnerSource, a practice that brings open-source principles to internal software development within organizations

Xebia

InnerSource can be defined as the application of open-source software development principles within an organization’s internal software development processes. It draws on the valuable lessons learned from open-source projects and adapts them to the context of how companies create software internally. What is InnerSource?

article thumbnail

Secret Management Triad – VM, Vault, Artifactory

Xebia

The challenge is to retrieve artifacts from JFrog Artifactory by a Virtual Machine (VM) in Google Cloud (GCP), whilst using some sort of authentication and authorization mechanism (IAM). Below we present more detail on the design of the PoC and provide code snippets to do this for your own solution. The resolution. The PoC design.

article thumbnail

Learn Azure by Doing with New Azure Training!

Linux Academy

Ready to solidify your Azure skills by doing? We’re excited to announce our completely new Azure courses that meet 100% of exam objectives and include Hands-On Labs, Interactive Diagrams, flash cards, study groups, practice exams, downloadable course videos, and more! Azure, just like Microsoft ? New Azure Courses.

Azure 83
article thumbnail

Build and deploy an ASP.NET Core application to Azure

CircleCI

Microsoft Azure Web Apps is a platform as a service (PaaS) that lets you publish Web apps running on multiple frameworks and written in different programming languages. You can then use a CI/CD tool to build, test, and deploy web applications for a faster release cycle, more efficient development, and higher-quality code.

Azure 52