Tenable researchers found two security vulnerabilities in Microsoft’s Azure Health Bot platform that could allow unauthorized access to internal APIs and cross-tenant resources. Microsoft acted promptly on Tenable’s findings, applying mitigations to all affected services and eliminating the attack vector. These discoveries highlight the potential risks of AI-powered services and the need for strong web application and cloud security controls.
Securonix Threat Labs 2024 Annual Autonomous Threat Sweeper (ATS) Intelligence Insights
2024 saw the evolution of cyber threats, with attacks on widely-used technologies like VPNs, advanced phishing campaigns, and exploitations of cloud services for malware distribution.