Privilege Escalation in Microsoft Azure Through Legacy Resource Management APIs

Learn about a groundbreaking security conference talk from NDC Security in Oslo that reveals new techniques for attacking Azure resources through legacy Azure Resource Management APIs. Explore the inherent risks of assigning low-privilege roles like Subscription Readers and discover how to implement defense-in-depth strategies to protect Azure environments. Gain insights into real vulnerabilities found in Azure products that demonstrate these attack techniques, including cases where Microsoft has only partially addressed the security concerns, leaving many configurations still potentially vulnerable. Master the understanding of privilege escalation risks in Microsoft Azure and develop effective mitigation strategies to enhance your cloud security posture.