Microsoft’s Azure cloud platform contains a severe security flaw that could allow malware execution, according to researchers from Vectra. The vulnerability exists in Azure Logs, ironically used for identifying malicious activity. Users can inject malicious data into logs, tricking applications into executing malware. Alternatively, CSV Injection could also introduce malware. The vulnerability can be executed unauthenticated, meaning attackers don’t need a cloud account. Fully patched Excel instances are reportedly immune to this issue.
New WireTap Attack Extracts Intel SGX ECDSA Key via DDR4 Memory-Bus Interposer
In yet another piece of research, academics from Georgia Institute of Technology and Purdue University have demonstrated that the security guarantees offered by Intel’s Software
