Microsoft informs users about security bug in Azure Cloud
By MYBRANDBOOK
Microsoft has informed users about a 'NotLegit' bug in Azure Cloud that may have put some customers' data at hacking risk. The Microsoft's Security Response Centre (MSRC) was informed by cloud security vendor Wiz.io, of an issue where customers can unintentionally configure the '.git folder' to be created in the content root, which would put them at risk for information disclosure.
The company said, "When combined with an application configured to serve static content, this bug makes it possible for others to download files not intended to be public."
The company further said that this happens because the system attempts to preserve the currently deployed files as part of repository contents, and activates what is referred to as in-place deployments by deployment engine Kudu.
Microsoft has notified customers who were impacted due to the activation of in-place deployment with specific guidance on how to mitigate the issue. Microsoft updated all PHP images to disallow serving the .git folder as static content as a defence in depth measure.
Nazara and ONDC set to transform in-game monetization with ‘
Nazara Technologies has teamed up with the Open Network for Digital Comme...
Jio Platforms and NICSI to offer cloud services to government
In a collaborative initiative, the National Informatics Centre Services In...
BSNL awards ₹5,000 Cr Project to RVNL-Led Consortium
A syndicate led by Rail Vikas Nigam Limited (abbreviated as RVNL), along wi...
Pinterest tracks users without consent, alleges complaint
A recent complaint alleges that Pinterest, the popular image-sharing platf...
MICROTEK INTERNATIONAL PVT. LTD.
DRUVA SOFTWARE PVT. LTD.
SAFE SECURITY SERVICES PVT. LTD.
MATRIX COMSEC PVT. LTD.
ICONS OF INDIA : RAJIV MEMANI
As Chair of the EY Global Emerging Markets Committee, Rajiv connects e...
ICONS OF INDIA : ROSHNI NADAR MALHOTRA
Roshni Nadar Malhotra is the Chairperson of HCLTech, a leading global ...
Icons Of India : NANDAN NILEKANI
Nandan Nilekani is the Co-Founder and Chairman of Infosys Technologies...
CSC - Common Service Centres
CSC initiative in India is a strategic cornerstone of the Digital Indi...
C-DOT - Center of Development of Telematics
India’s premier research and development center focused on telecommu...
ECIL - Electronics Corporation of India Limited
ECIL is distinguished by its diverse technological capabilities and it...
Indian Tech Talent Excelling The Tech World - Vinod Dham, Founder & Executive Managing Partner, IndoUS Venture Partners
Vinod Dham, known as the “Father of the Pentium Chip,” has left an...
Indian Tech Talent Excelling The Tech World - Shantanu Narayen, CEO- Adobe Systems Incorporated
Shantanu Narayen, CEO of Adobe Systems Incorporated, is renowned for h...
Indian Tech Talent Excelling The Tech World - JAY CHAUDHRY, CEO – Zscaler
Jay Chaudhry, an Indian-American technology entrepreneur, is the CEO a...