Microsoft Shares Guidance on Securing Azure Accounts

Share post:

Microsoft recently released some recommendations for securing Azure Cosmos DB accounts.

Microsoft presented several recommendations, including regenerating Cosmos DB keys, using a combination of firewall rules, vNet and/or Azure Private Link for all Azure Cosmos DB customers. They also recommended using Role-Based Access Control that allows per user and security principal access control to Azure Cosmos DB and, finally, implementing regularly scheduled key changes in case users cannot use Role-Based Access Control.

The warning became needed after a bug known as Chaos DB affected Microsoft Azure Cosmos DB.

The bug granted attackers full admin rights to user data without authorization and allowed users to steal their customers’ primary read-write keys, giving them the power to remotely take over their databases.

In addition to the various recommendations, Microsoft also added additional security measures to prevent future attempts to gain access to its customers’ Cosmos DB accounts without authorization.

For more information, read the original story in Bleeping Computer.

Featured Tech Jobs


Related articles

Cyber Security Today, Week in Review for week ending Friday April 19, 2024

On this episode Jen Ellis, co-chair of the Ransomware Task Force, talks about ways of fighting one of the biggest cyber threats to IT d

Cyber Security Today, April 19, 2024 – Police bust phishing rental platform, a nine-year old virus found on Ukrainian computers, and more

This episode reports on a threat actor targeting governments in the Middle East with a novel way of hiding malware is going international

Controversial expansion of US surveillance powers nears Senate vote

The US Senate is poised to vote on a significant expansion of Section 702 of the Foreign Intelligence...

Russian-linked hackers target U.S. and European water systems

A Russian military-affiliated hacking group, Sandworm, is suspected of coordinating recent cyberattacks on water utilities in the U.S.,...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways