Authentication, Azure and Windows

Microsoft’s April 2024 Patch Tuesday Addresses 147 CVEs (CVE-2024-29988)

Tenable

APRIL 9, 2024

Important CVE-2024-29990 | Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability CVE-2024-29990 is an EoP vulnerability in the Azure Kubernetes Service Confidential Containers (AKSCC). of the vulnerabilities patched this month, followed by elevation of privilege (EoP) vulnerabilities at 21.1%.

Azure

Azure Windows Internet Social

Microsoft’s March 2024 Patch Tuesday Addresses 59 CVEs (CVE-2024-21407)

Tenable

MARCH 12, 2024

Critical CVE-2024-21407 | Windows Hyper-V Remote Code Execution Vulnerability CVE-2024-21407 is a RCE vulnerability in Windows Hyper-V. Successful exploitation of this vulnerability requires that an attacker be authenticated and gather information about the target environment in order to craft their exploit.

Windows

Windows Azure Authentication Infrastructure

Microsoft’s February 2024 Patch Tuesday Addresses 73 CVEs (CVE-2024-21351, CVE-2024-21412)

Tenable

FEBRUARY 13, 2024

Moderate CVE-2024-21351 | Windows SmartScreen Security Feature Bypass Vulnerability CVE-2024-21351 is a security feature bypass vulnerability in Windows SmartScreen. Since 2022, there have been five Windows SmartScreen vulnerabilities disclosed across Patch Tuesday. It was assigned a CVSSv3 score of 7.6 and is rated moderate.

LAN

LAN Windows Azure Internet

Webinars

Peak Performance: Continuous Testing & Evaluation of LLM-Based Applications

MORE WEBINARS

MicroK8s: Up and Running in Azure

Linux Academy

APRIL 10, 2020

Windows Terminal. Windows Subsystem for Linux (WSL). Canonical fully supports the Ubuntu distribution running in Azure. Canonical, having such an integrated and unified presence in the Azure ecosystem, provides a perfect opportunity to demonstrate how easy it is to get up and running with MicroK8s in Azure. .

Azure

Azure Linux Open Source Groups

Microsoft’s January 2024 Patch Tuesday Addresses 48 CVEs (CVE-2024-20674)

Tenable

JANUARY 9, 2024

Critical CVE-2024-20674 | Windows Kerberos Security Feature Bypass Vulnerability CVE-2024-20674 is a critical security feature bypass vulnerability affecting Windows Kerberos, an authentication protocol designed to verify user or host identities. The attacker would then be able to bypass authentication via impersonation.

Windows

Windows Authentication Cloud Linux

Streamline CI/CD with Azure DevOps Toolchains

Datavail

FEBRUARY 1, 2022

Microsoft’s Azure DevOps platform has the CI/CD tool chains you need to do just that. The evolving Azure DevOps tool kit that embraces CI/CD development offers solutions to those challenges: The need for extended security. Azure DevOps Platform Delivers Top-of-Line CI/CD Toolchains. Features of Azure Pipelines.

Azure

Azure DevOps Testing Serverless

Microsoft’s September 2023 Patch Tuesday Addresses 61 CVEs (CVE-2023-36761)

Tenable

SEPTEMBER 12, 2023

Successful exploitation of these vulnerabilities requires an attacker to authenticate with LAN-access and have valid credentials for an Exchange user. An authenticated attacker could exploit these vulnerabilities to gain SYSTEM privileges. An authenticated attacker could exploit these vulnerabilities to gain SYSTEM privileges.

LAN

LAN Windows 3D Azure

Microsoft’s October 2023 Patch Tuesday Addresses 103 CVEs (CVE-2023-36563, CVE-2023-41763)

Tenable

OCTOBER 10, 2023

Critical CVE-2023-35349 | Microsoft Message Queuing Remote Code Execution Vulnerability CVE-2023-35349 is a RCE vulnerability in the Microsoft Message Queuing (MSMQ) component of Windows operating systems that was assigned a CVSSv3 score of 9.8 and rated critical.

Windows

Windows Software Review Azure Systems Review

Setting up XP xConnect Roles on Azure PaaS with Solr Cloud

Perficient

JULY 25, 2023

Goal of the exercise is to set up all XP xConnect Roles on an Azure PaaS environment. I am using self-signed certificate for token authentication between xConnect Roles for this exercise. The xConnect Roles were set up initially with Azure Search using WDP templates and Solr Cloud set up is also part of this exercise.

Azure

Azure Cloud Exercises Authentication

Build and deploy an ASP.NET Core application to Azure

CircleCI

DECEMBER 14, 2021

Microsoft Azure Web Apps is a platform as a service (PaaS) that lets you publish Web apps running on multiple frameworks and written in different programming languages. In this tutorial, I will show you how to set up a continuous deployment pipeline to deploy an ASP.NET Core application to an Azure Web App service. An Azure account.

Azure

Azure Applications Software Review Technical Review

Learn Azure by Doing with New Azure Training!

Linux Academy

MAY 7, 2019

Ready to solidify your Azure skills by doing? We’re excited to announce our completely new Azure courses that meet 100% of exam objectives and include Hands-On Labs, Interactive Diagrams, flash cards, study groups, practice exams, downloadable course videos, and more! Azure, just like Microsoft ? New Azure Courses.

Azure

Azure Training Technical Review Linux

Microsoft’s February 2023 Patch Tuesday Addresses 75 CVEs (CVE-2023-23376)

Tenable

FEBRUARY 14, 2023

Important CVE-2023-23376 | Windows Common Log File System Driver Elevation of Privilege Vulnerability CVE-2023-23376 is an EoP vulnerability in Windows operating systems receiving a CVSSv3 score of 7.8 that has been exploited in the wild. that has been exploited in the wild.

Windows

Windows Azure Authentication Policies

Learn Azure by Doing with New Azure Training!

Linux Academy

MAY 7, 2019

Ready to solidify your Azure skills by doing? We’re excited to announce our completely new Azure courses that meet 100% of exam objectives and include Hands-On Labs, Interactive Diagrams, flash cards, study groups, practice exams, downloadable course videos, and more! We Azure, just like Microsoft Linux! New Azure Courses.

Azure

Azure Training Linux Technical Review

Microsoft’s October 2022 Patch Tuesday Addresses 84 CVEs (CVE-2022-41033)

Tenable

OCTOBER 11, 2022

Role: Windows Hyper-V. Windows Active Directory Certificate Services. Windows ALPC. Windows CD-ROM Driver. Windows COM+ Event System Service. Windows Connected User Experiences and Telemetry. Windows CryptoAPI. Windows Defender. Windows DHCP Client. Windows Distributed File System (DFS).

Windows

Windows Azure Authentication Policies

February 2024 Patch Tuesday

Ivanti

FEBRUARY 13, 2024

Microsoft updates this month impact the Windows OS, Office 365, Edge, Windows Defender, Sharepoint, SQL Server, Exchange Server,Net (reissued), multiple Azure components and a few odds and ends. Starting with the reissue: Microsoft reissued a spoofing vulnerability in Windows AppX Installer ( CVE-2021-43890 ).

Software Review

Software Review Systems Review Windows Authentication

Microsoft’s December 2023 Patch Tuesday Addresses 33 CVEs (CVE-2023-36019)

Tenable

DECEMBER 12, 2023

authentication will be assigned a per-connector redirect URI automatically. Important CVE-2023-36696 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability CVE-2023-36696 is an EoP vulnerability in the Microsoft Windows Cloud Files Mini Filter Driver (cldflt.sys). and a maximum severity rating of critical.

Windows

Windows Software Review Azure Internet

Microsoft’s August 2023 Patch Tuesday Addresses 73 CVEs (CVE-2023-38180)

Tenable

AUGUST 8, 2023

Critical CVE-2023-35385, CVE-2023-36910 and CVE-2023-36911 | Microsoft Message Queuing Remote Code Execution Vulnerability CVE-2023-35385 , CVE-2023-36910 and CVE-2023-36911 are RCE vulnerabilities in the Microsoft Message Queuing (MSMQ) component of Windows operating systems that were each given a CVSSv3 score of 9.8

Windows

Windows Software Review .Net Azure

Open-Source Authorization as a Service

Dzone - DevOps

FEBRUARY 16, 2023

Background Information The story starts back in 2007 when our founders, Omri Gazitt and Gert Drapers, were working on what would eventually become Azure Active Directory. At that time, Active Directory was a keystone workload for Windows Server. It enabled IT admins to map users and groups into the roles that enterprise apps exposed.

Open Source

Open Source Azure Authentication Windows

Microsoft’s June 2023 Patch Tuesday Addresses 70 CVEs (CVE-2023-29357)

Tenable

JUNE 13, 2023

A remote, unauthenticated attacker can exploit the vulnerability by sending a spoofed JWT authentication token to a vulnerable server giving them the privileges of an authenticated user on the target. We did not include these advisories in our overall Patch Tuesday counts. and rated critical. and rated critical.

Windows

Windows Authentication Operating System 3D

Learn Azure by Doing with New Azure Training!

Linux Academy

MAY 7, 2019

Ready to solidify your Azure skills by doing? We’re excited to announce our completely new Azure courses that meet 100% of exam objectives and include Hands-On Labs, Interactive Diagrams, flash cards, study groups, practice exams, downloadable course videos, and more! Azure, just like Microsoft ? New Azure Courses.

Azure

Azure Training Technical Review Linux

Microsoft’s October 2020 Patch Tuesday Addresses 87 CVEs including “Bad Neighbor” Windows TCP/IP Vulnerability (CVE-2020-16898)

Tenable

OCTOBER 13, 2020

CVE-2020-16898 | Windows TCP/IP Remote Code Execution Vulnerability. CVE-2020-16898 | Windows TCP/IP Remote Code Execution Vulnerability. CVE-2020-16898 , dubbed “Bad Neighbor,” is a critical remote code execution (RCE) vulnerability within the Windows TCP/IP stack.

Windows

Windows Software Review Systems Review Advertising

AWS vs Azure vs Google Cloud – Which Cloud Platform Should You Choose for Your Enterprise?

KitelyTech

FEBRUARY 15, 2023

With so many different options available, such as AWS, Azure, and Google Cloud, it is important to understand the differences between each platform and how they can best meet your business needs. Examples of cloud computing services are Amazon Web Service (AWS), Microsoft Azure, Google Cloud Platform, etc.

Google Cloud

Google Cloud Azure AWS Cloud

Microsoft’s June 2022 Patch Tuesday Addresses 55 CVEs (CVE-2022-30190)

Tenable

JUNE 14, 2022

Azure Real Time Operating System. Azure Service Fabric Container. Microsoft Windows ALPC. Microsoft Windows Codecs Library. Role: Windows Hyper-V. Windows Ancillary Function Driver for WinSock. Windows Ancillary Function Driver for WinSock. Windows App Store. Windows Autopilot.

Windows

Windows Azure SMB Internet

Microsoft’s December 2022 Patch Tuesday Addresses 48 CVEs (CVE-2022-44698)

Tenable

DECEMBER 13, 2022

Microsoft Windows Codecs Library. Role: Windows Hyper-V. Windows Certificates. Windows Contacts. Windows DirectX. Windows Error Reporting. Windows Fax Compose Form. Windows HTTP Print Provider. Windows Kernel. Windows PowerShell. Windows Print Spooler Components.

Windows

Windows Authentication .Net Operating System

Microsoft’s March 2023 Patch Tuesday Addresses 76 CVEs (CVE-2023-23397)

Tenable

MARCH 14, 2023

The attacker can use this hash to authenticate as the victim recipient in an NTLM relay attack. Moderate CVE-2023-24880 | Windows SmartScreen Security Feature Bypass Vulnerability CVE-2023-24880 is a Windows SmartScreen Security Feature Bypass vulnerability in Windows operating systems that was assigned a CVSSv3 score of 5.4.

Windows

Windows Operating System Authentication Internet

Microsoft’s August 2022 Patch Tuesday Addresses 118 CVEs (CVE-2022-34713)

Tenable

AUGUST 9, 2022

Azure Batch Node Agent. Azure Real Time Operating System. Azure Site Recovery. Azure Sphere. Microsoft Windows Support Diagnostic Tool (MSDT). Role: Windows Fax Service. Role: Windows Hyper-V. Windows Bluetooth Service. Windows Canonical Display Driver. Windows Defender Credential Guard.

SMB

SMB Azure Windows Disaster Recovery

Microsoft’s November 2023 Patch Tuesday Addresses 57 CVEs (CVE-2023-36025)

Tenable

NOVEMBER 14, 2023

3 Critical 54 Important 0 Moderate 0 Low Update November 14: This blog has been updated to note the availability of fixes for Windows and Windows Server for CVE-2023-38545, a heap buffer overflow vulnerability in curl. Successful exploitation would result in a bypass of the security checks in Windows Defender SmartScreen.

Windows

Windows Systems Review Software Review .Net

How to Use Aviatrix SD Cloud Routing to Build Azure Networks

Aviatrix

MARCH 20, 2019

But, as enterprises migrate more and more mission critical applications to the cloud, there are many connectivity and security requirements that are not natively available in Azure. The diagram below shows at a high level how Azure customers deploy Aviatrix today. Azure allows filtering internet bound traffic based on domain-names.

Azure

Azure Network Cloud How To

Microsoft’s January 2023 Patch Tuesday Addresses 98 CVEs (CVE-2023-21674)

Tenable

JANUARY 10, 2023

Azure Service Fabric Container. Windows ALPC. Windows Ancillary Function Driver for WinSock. Windows Ancillary Function Driver for WinSock. Windows Authentication Methods. Windows Backup Engine. Windows Bind Filter Driver. Windows BitLocker. Windows Boot Manager. Windows iSCSI.

Windows

Windows Software Review Operating System LAN

Microsoft’s November 2021 Patch Tuesday Addresses 55 CVEs (CVE-2021-42321)

Tenable

NOVEMBER 9, 2021

Azure RTOS. Azure Sphere. Microsoft Windows. Microsoft Windows Codecs Library. Role: Windows Hyper-V. Windows Active Directory. Windows COM. Windows Core Shell. Windows Cred SSProvider Protocol. Windows Defender. Windows Desktop Bridge. Windows Diagnostic Hub.

3D

3D Windows Software Review Azure

Microsoft’s March 2022 Patch Tuesday Addresses 71 CVEs (CVE-2022-23277, CVE-2022-24508)

Tenable

MARCH 8, 2022

Azure Site Recovery. Microsoft Windows ALPC. Microsoft Windows Codecs Library. Role: Windows Hyper-V. Tablet Windows User Interface. Windows Ancillary Function Driver for WinSock. Windows CD-ROM Driver. Windows Cloud Files Mini Filter Driver. Windows COM. Windows DWM Core Library.

Windows

Windows Authentication SMB .Net

Microsoft’s March 2021 Patch Tuesday Addresses 82 CVEs (CVE-2021-26411)

Tenable

MARCH 9, 2021

CVE-2021-26877, CVE-2021-26893, CVE-2021-26894, CVE-2021-26895, and CVE-2021-26897 | Windows DNS Server Remote Code Execution Vulnerability. CVE-2021-26877 , CVE-2021-26893 , CVE-2021-26894 , CVE-2021-26895 and CVE-2021-26897 are RCE vulnerabilities found in Windows Domain Name System (DNS) servers. out of 10.0.

Windows

Windows Azure Internet Research

Microsoft’s August 2021 Patch Tuesday Addresses 44 CVEs (CVE-2021-26424, CVE-2021-36948)

Tenable

AUGUST 10, 2021

Azure Sphere. Microsoft Azure Active Directory Connect. Microsoft Windows Codecs Library. Windows Bluetooth Service. Windows Cryptographic Services. Windows Defender. Windows Defender. Windows Event Tracing. Windows Media. Windows MSHTML Platform. Windows NTLM.

Windows

Windows Azure LAN .Net

August Patch Tuesday 2022

Ivanti

AUGUST 9, 2022

on Windows 8.1 Windows Operating System. Azure Sphere, Site Recovery, Real Time OS and Batch Node Agent.NET Core. Microsoft has resolved a remote code execution vulnerability in Microsoft Windows Support Diagnostic Tool (MSDT) ( CVE-2022-34713 ), which has been publicly disclosed and observed in attacks in the wild.

Windows

Windows Systems Review Budget Azure

Microsoft’s April 2022 Patch Tuesday Addresses 117 CVEs (CVE-2022-24521)

Tenable

APRIL 12, 2022

Azure Site Recovery. Microsoft Windows ALPC. Microsoft Windows Codecs Library. Microsoft Windows Media Foundation. Role: Windows Hyper-V. Windows Ancillary Function Driver for WinSock. Windows App Store. Windows AppX Package Manager. Windows Cluster Client Failover. Windows Defender.

Windows

Windows Systems Review Software Review SMB

Microsoft’s April 2021 Patch Tuesday Addresses 108 CVEs (CVE-2021-28310)

Tenable

APRIL 13, 2021

Azure AD Web Sign-in. Azure DevOps. Azure Sphere. Microsoft Windows Codecs Library. Microsoft Windows Speech. Windows Application Compatibility Cache. Windows AppX Deployment Extensions. Windows Console Driver. Windows Diagnostic Hub. Windows Early Launch Antimalware Driver.

Windows

Windows Azure SMB Report

Investigating az-cli performance on the hosted Azure Pipelines and GitHub Runners

Xebia

OCTOBER 2, 2023

Azure CLI is a great nifty tool to chat to Azure as well as Azure DevOps and there’s a AzureCLI@v2 task in Azure DevOps that preconfigures your Azure subscription and all.While testing I got increasingly frustrated by how slow az is on GitHub Actions and Azure Pipelines hosted runners.

Azure

Azure Performance DevOps Windows

April Patch Tuesday 2021

Ivanti

APRIL 13, 2021

Microsoft has released updates for the Windows OS, Office and O365, Exchange Server, Edge (Chromium), Visual Studio, Azure DevOps, Azure AD Web Sign-in, Azure Sphere, and many other components. Publicly Disclosed: A vulnerability exists in Windows Installer that could allow for Information Disclosure CVE-2021-28437.

Windows

Windows Azure Operating System Fashion

How to prepare for the AZ- 204 Exam: An Articulated Case Study

Cloud That

NOVEMBER 23, 2022

An Azure account with an active? Azure Subscription? or Azure Pass. Getting Started with Azure Virtual Machines. Creating HTML Website using Azure App Service. Identity Providers for Authentication & Authorization. Management of APIs through Azure Portal. Management of APIs through Azure Portal.

Case Study

Case Study Azure Study How To

Sitecore database upgrade preparation

Perficient

DECEMBER 21, 2023

Prerequisites for upgrading You should know your local host Windows ltsc version and your sitecore topology. production databases on Azure. Enable contained database authentication by running this following command in SSMS. For me, ltsc version was 2019 and sitecore topology was xp0. databases from local via SSMS.

Azure

Azure Backup Software Review Technical Review

November Patch Tuesday 2021

Ivanti

NOVEMBER 9, 2021

The updates include the normal lineup of Windows OS, Office, Azure, and some dev tools like Visual Studio. The vulnerability is rated as Important by Microsoft likely because the attacker must be authenticated to be able to exploit the vulnerability. The exploit does not require authentication but does require user interaction.

3D

3D Malware Windows Authentication

Microsoft’s June 2020 Patch Tuesday Addresses 129 CVEs Including Newly Disclosed SMBv3 Vulnerability (CVE-2020-1206)

Tenable

JUNE 9, 2020

The updates this month include patches for Microsoft Windows, Microsoft Edge, ChakraCore, Internet Explorer, Microsoft Office, Microsoft Office Services and Web Apps, Windows Defender, Microsoft Dynamics, Visual Studio, Azure DevOps and Adobe Flash Player. CVE-2020-1194 | Windows Registry Denial of Service Vulnerability.

SMB

SMB Software Review Systems Review Windows

Microsoft’s December 2020 Patch Tuesday Addresses 58 CVEs including CVE-2020-25705 (SAD DNS)

Tenable

DECEMBER 8, 2020

The final Patch Tuesday of 2020 includes fixes for 58 CVEs, including workaround details for a severe vulnerability in Windows DNS Resolver called SAD DNS. CVE-2020-25705 | Windows DNS Resolver Spoofing Vulnerability. CVE-2020-17096 | Windows NTFS Remote Code Execution Vulnerability.

Software Review

Software Review Windows Systems Review Azure

July 2023 Patch Tuesday

Ivanti

JULY 11, 2023

What to expect in July 2023’s updates for Kerberos and Netlogon vulnerabilities Microsoft outlined a phased rollout of enforcement for both vulnerabilities, due to the fact that they are changing some core behaviors in two commonly used authentication mechanisms. For July, Microsoft is stepping up to initial enforcement. The CVSS v3.1

Software Review

Software Review Windows Systems Review Report

Microsoft’s April 2024 Patch Tuesday Addresses 147 CVEs (CVE-2024-29988)

Microsoft’s March 2024 Patch Tuesday Addresses 59 CVEs (CVE-2024-21407)

Webinars

Trending Sources

Microsoft’s February 2024 Patch Tuesday Addresses 73 CVEs (CVE-2024-21351, CVE-2024-21412)

Webinars

MicroK8s: Up and Running in Azure

Microsoft’s January 2024 Patch Tuesday Addresses 48 CVEs (CVE-2024-20674)

Streamline CI/CD with Azure DevOps Toolchains

Microsoft’s September 2023 Patch Tuesday Addresses 61 CVEs (CVE-2023-36761)

Microsoft’s October 2023 Patch Tuesday Addresses 103 CVEs (CVE-2023-36563, CVE-2023-41763)

Setting up XP xConnect Roles on Azure PaaS with Solr Cloud

Build and deploy an ASP.NET Core application to Azure

Learn Azure by Doing with New Azure Training!

Microsoft’s February 2023 Patch Tuesday Addresses 75 CVEs (CVE-2023-23376)

Learn Azure by Doing with New Azure Training!

Microsoft’s October 2022 Patch Tuesday Addresses 84 CVEs (CVE-2022-41033)

February 2024 Patch Tuesday

Microsoft’s December 2023 Patch Tuesday Addresses 33 CVEs (CVE-2023-36019)

Microsoft’s August 2023 Patch Tuesday Addresses 73 CVEs (CVE-2023-38180)

Open-Source Authorization as a Service

Microsoft’s June 2023 Patch Tuesday Addresses 70 CVEs (CVE-2023-29357)

Learn Azure by Doing with New Azure Training!

Microsoft’s October 2020 Patch Tuesday Addresses 87 CVEs including “Bad Neighbor” Windows TCP/IP Vulnerability (CVE-2020-16898)

AWS vs Azure vs Google Cloud – Which Cloud Platform Should You Choose for Your Enterprise?

Microsoft’s June 2022 Patch Tuesday Addresses 55 CVEs (CVE-2022-30190)

Microsoft’s December 2022 Patch Tuesday Addresses 48 CVEs (CVE-2022-44698)

Microsoft’s March 2023 Patch Tuesday Addresses 76 CVEs (CVE-2023-23397)

Microsoft’s August 2022 Patch Tuesday Addresses 118 CVEs (CVE-2022-34713)

Microsoft’s November 2023 Patch Tuesday Addresses 57 CVEs (CVE-2023-36025)

How to Use Aviatrix SD Cloud Routing to Build Azure Networks

Microsoft’s January 2023 Patch Tuesday Addresses 98 CVEs (CVE-2023-21674)

Microsoft’s November 2021 Patch Tuesday Addresses 55 CVEs (CVE-2021-42321)

Microsoft’s March 2022 Patch Tuesday Addresses 71 CVEs (CVE-2022-23277, CVE-2022-24508)

Microsoft’s March 2021 Patch Tuesday Addresses 82 CVEs (CVE-2021-26411)

Microsoft’s August 2021 Patch Tuesday Addresses 44 CVEs (CVE-2021-26424, CVE-2021-36948)

August Patch Tuesday 2022

Microsoft’s April 2022 Patch Tuesday Addresses 117 CVEs (CVE-2022-24521)

Microsoft’s April 2021 Patch Tuesday Addresses 108 CVEs (CVE-2021-28310)

Investigating az-cli performance on the hosted Azure Pipelines and GitHub Runners

April Patch Tuesday 2021

How to prepare for the AZ- 204 Exam: An Articulated Case Study

Sitecore database upgrade preparation

November Patch Tuesday 2021

Microsoft’s June 2020 Patch Tuesday Addresses 129 CVEs Including Newly Disclosed SMBv3 Vulnerability (CVE-2020-1206)

Microsoft’s December 2020 Patch Tuesday Addresses 58 CVEs including CVE-2020-25705 (SAD DNS)

July 2023 Patch Tuesday

Stay Connected