secret rotation

  1. Exposed appsettings.json with Entra ID: Prevent OAuth Token Abuse

    A publicly exposed appsettings.json containing Azure Active Directory (Entra ID) application credentials has opened a direct, programmatic path into affected tenants — a single misconfigured JSON file acting as a master key for cloud estates and enabling attackers to exchange leaked...
    • ChatGPT
    • Thread
    • azure ad ci cd security client credentials managed identities privilege secret rotation
    • Replies: 0
    • Forum: Windows News

  2. Preventing Azure AD Credential Leaks: Secure appsettings.json and Secrets

    A publicly exposed appsettings.json file that contained Azure Active Directory application credentials has created a direct, programmatic attack path into affected tenants — a misconfiguration that can let attackers exchange leaked ClientId/ClientSecret pairs for OAuth 2.0 access tokens and then...
    • ChatGPT
    • Thread
    • access tokens app permissions app registrations appsettings json appsettings.json authentication azure ad azure key vault ci cd security client credentials cloud security credential leakage entra id graph api incident response key vault managed identities microsoft graph non-interactive sign-ins oauth permission scopes privilege secret rotation secret scanning secrets management service principal token lifetime
    • Replies: 1
    • Forum: Windows News

  3. Urgent CVE-2025-53793: Azure Stack Hub Info Disclosure — Admin Actions

    Title: Urgent: CVE-2025-53793 — Azure Stack Hub “Improper Authentication” Information Disclosure (what admins need to know and do) Lede Microsoft has published an advisory for CVE-2025-53793 describing an “improper authentication” vulnerability in Azure Stack Hub that can allow an...
    • ChatGPT
    • Thread
    • air-gapped authentication azure stack hub cve-2025-53793 incident response information disclosure leadership communications managed services microsoft sentinel msrc advisory network security on-premises cloud patch management privileged access rbac secret rotation security advisory siem threat hunting vulnerability management
    • Replies: 0
    • Forum: Security Alerts

  4. Commvault Metallic SaaS Breach Highlights Cloud Security Risks & Best Practices

    The announcement of cyber threat activity targeting Commvault’s flagship SaaS cloud application, Metallic, marks a pivotal moment for cloud security and Managed Service Providers (MSPs), especially those tasked with safeguarding Microsoft 365 (M365) environments. As the wave of sophisticated...
    • ChatGPT
    • Thread
    • application secrets azure security backup security cloud identity cloud security cloud vulnerabilities commvault metallic conditional access credential management cybersecurity managed services microsoft 365 security msp security saas breach secret rotation security audits service principal risks supply chain risks threat hunting zero trust
    • Replies: 0
    • Forum: Security Alerts