key vault

Terraform can provision an Azure Windows VM and, with a single VM extension call, make that VM an Active Directory member so it’s ready for work the moment provisioning finishes — but doing this safely and reliably at scale requires careful choices about secrets, identities, network design and...

A publicly exposed appsettings.json file that contained Azure Active Directory application credentials has created a direct, programmatic attack path into affected tenants — a misconfiguration that can let attackers exchange leaked ClientId/ClientSecret pairs for OAuth 2.0 access tokens and then...

Microsoft's Internet Information Services (IIS) and its relationship with Windows Server have once again become a focus. Recent reports from Hong Kong and international media, along with practical feedback from community forums, show that as Microsoft continues to release security patches and...

Zero-trust is not an add-on for AI pipelines — it must be baked into the fabric of how data, models and orchestration talk to one another. In a recent InfoWorld piece, the author laid out a metadata-driven, zero-trust MLOps reference architecture on Azure that combines Microsoft Entra ID, Azure...

Microsoft’s Azure Cloud HSM service will now run on Marvell’s LiquidSecurity family of hardware security modules (HSMs), a move that extends Marvell’s existing footprint across Azure Key Vault and Managed HSM and brings PCIe‑attached, FIPS‑validated, cloud‑optimized HSM hardware into Microsoft’s...

Microsoft has selected Marvell’s LiquidSecurity family of hardware security modules (HSMs) to power its Azure Cloud HSM offering — a move that consolidates Marvell’s role across Azure’s key management portfolio and brings FIPS 140‑3 Level 3‑certified, high‑density PCIe HSMs into Microsoft’s...

Azure Virtual Machines are affected by an information disclosure vulnerability tracked as CVE-2025-53781, a flaw Microsoft lists in its Security Update Guide that describes the exposure of sensitive information from Azure-hosted virtual machines which could allow an attacker with certain...

The official Azure SDK for Rust has officially entered its beta phase, marking a significant milestone for both Microsoft and the Rust community. This new collection of libraries is designed to simplify development for Rust programmers while seamlessly integrating with a wide array of Azure...

Today Amit Bapat introduces Scott to Azure Key Vault. With Azure Key Vault, you can encrypt keys and small secrets like passwords using keys stored in hardware security modules (HSMs). It's cloud-based, hardware-based secret management for Microsoft Azure! Link Removed Link Removed

Even with a quite week due to the July 4th holiday here in the States, we still have 18 sessions for you to check out... Link Removed Josh Holmes describes Project Nitrogen - a framework that helps maintain data retrieved from hardware devices and stored in the cloud. Link Removed Channel...

In this episode Chris Risner and Haishi Bai are joined by Link Removed, Program Manager on the Azure Security team. Sumedh joins us to talk about Azure Key Vault, a new technology for storing sensitive keys and secrets within Azure. Key Vault offers the ability to store secrets which you can...