Tag: Azure

  • Hacker Claims 3.6 Million Azure Account Records Stolen From Major Companies

    Hacker Claims 3.6 Million Azure Account Records Stolen From Major Companies

    A threat actor is offering millions of alleged Azure account records for sale, claiming they came from the Microsoft cloud tenants of several major companies. The seller says compromised credentials provided access to employee directories and internal account information. The claims have not been independently verified. At least two named companies, Tata Consultancy Services and…

  • Azure Password Spraying Attack Exploits Legacy Login Method to Bypass MFA

    Azure Password Spraying Attack Exploits Legacy Login Method to Bypass MFA

    A large-scale Azure password spraying attack is targeting organizations by abusing a legacy authentication method that can bypass improperly configured multi-factor authentication (MFA). Researchers have observed more than 81 million login attempts over two weeks, with attackers successfully compromising dozens of Microsoft accounts across 64 organizations. Azure CLI Under Attack Cybersecurity company Huntress is tracking…