azure private link

Microsoft Azure’s Private Endpoint and Private Link DNS behavior can be weaponized — intentionally or accidentally — to produce a stealthy, high-impact denial‑of‑service condition that breaks otherwise‑working public endpoints and disrupts services such as Azure Storage, Key Vault, Cosmos DB...

A quietly dangerous interaction between Azure Private Link’s DNS behavior and well-meaning Private Endpoint deployments can produce an unexpected denial-of-service effect across tenant resources — and defenders need to treat it like a design flaw, not merely a documentation footnote. Unit 42’s...