← Front PageCloud Desk
Cloud
Microsoft rejects critical Azure vulnerability report, no CVE issued
Vendor resistance to vulnerability disclosure creates compliance gaps for European organizations relying on Azure backup services.
Summary written by editorial AI · Source link below
A security researcher claims Microsoft quietly fixed an Azure Backup for AKS vulnerability after rejecting his report, and without issuing a CVE. Microsoft disputes the claim, telling BleepingComputer the behavior was expected and that "no product changes were made," despite the researcher documenting a silent fix. [...]
Continue at the source
Read the full report at BleepingComputerExternal link — opens at BleepingComputer in a new tab.
§
Continue with
More from the Cloud Desk
- Addressing protocol security gaps in multi-tenant Kubernetes3d
- Principal Problems: App Registrations, Service Principals, and the Hidden Risk of Multi-Tenant Apps3d
- LLMjacking Emerges as Thriving Cybercriminal Enterprise6d
- Google adds new $250,000 Cloud VRP reward for Root-in-Cloud bugs6d
- Inside a successful AWS European Sovereign Cloud exercise to demonstrate independent operation2 Nov