GPT Emerges as Key AI Tech for Security Vendors
Orca Security is one of the companies integrating conversational AI technology into its products.
Stay updated with breaking news from Orca Security. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Orca Security is one of the companies integrating conversational AI technology into its products.
The bug, reported to Microsoft on Oct. 26 and remediated Dec. 6, is the result of manipulating a series of misconfigurations and security bypasses in Kudu, a back-end source control management (SCM) tool that helps manage and modify web applications and is used by major Microsoft cloud services like Azure Functions, Azure App Service and Azure Logic Apps.
Two of the vulnerabilities — in Azure Functions and Azure Digital Twins — required no account authentication for an attacker to exploit them.
Two of the vulnerabilities — in Azure Functions and Azure Digital Twins — required no account authentication for an attacker to exploit them.
Orca security researchers have shared details on four SSRF vulnerabilities in Azure services, including two that could be exploited without authentication.