Remove Authentication Remove Azure Remove SMB
article thumbnail

Microsoft’s November 2024 Patch Tuesday Addresses 87 CVEs (CVE-2024-43451, CVE-2024-49039)

Tenable

Successful exploitation would lead to the unauthorized disclosure of a user’s NTLMv2 hash, which an attacker could then use to authenticate to the system as the user. Microsoft patched 87 CVEs in its November 2024 Patch Tuesday release, with four rated critical, 82 rated important and one rated moderate. It was assigned a CVSSv3 score of 9.8

Windows 115
article thumbnail

Microsoft’s September 2024 Patch Tuesday Addresses 79 CVEs (CVE-2024-43491)

Tenable

Active Directory Lightweight Directory Services Administrative Tools Internet Explorer 11 Internet Information ServicesWorld Wide Web Services LPD Print Service Microsoft Message Queue (MSMQ) Server Core MSMQ HTTP Support MultiPoint Connector SMB 1.0/CIFS Advanced Services ASP.NET 4.6 This vulnerability was assigned a CVSSv3 score of 7.3

Windows 118
article thumbnail

Running the OpenTelemetry Collector in Azure Container Apps

Honeycomb

In this post, we’ll look at how to host the OpenTelemetry Collector in Azure Container Apps. What are Azure Container Apps? Azure Container Apps are the latest offering of a Managed Container Runtime in Azure. For this post, we won’t be using Authentication. Step 1: Create a Storage Account and Azure File Share.

Azure 52
article thumbnail

Running the OpenTelemetry Collector in Azure Container Apps

Honeycomb

In this post, we’ll look at how to host the OpenTelemetry Collector in Azure Container Apps. What are Azure Container Apps? Azure Container Apps are the latest offering of a Managed Container Runtime in Azure. For this post, we won’t be using Authentication. Step 1: Create a Storage Account and Azure File Share.

Azure 52
article thumbnail

CISA and NSA Cloud Security Best Practices: Deep Dive

Tenable

The content in the CSIs underscores the importance of concepts such as least privilege, limiting attack surface area and centralizing logs for auditing purposes, as well as the use of tools like key management services (KMS), multi-factor authentication (MFA), and modern encryption protocols. 0 to remote server administration ports.

Cloud 135
article thumbnail

Microsoft’s August 2022 Patch Tuesday Addresses 118 CVEs (CVE-2022-34713)

Tenable

Azure Batch Node Agent. Azure Real Time Operating System. Azure Site Recovery. Azure Sphere. All three vulnerabilities require authentication and user interaction to exploit — an attacker would need to entice a target to visit a specially crafted Exchange server, likely through phishing. Microsoft ATA Port Driver.

SMB 66
article thumbnail

Microsoft’s June 2020 Patch Tuesday Addresses 129 CVEs Including Newly Disclosed SMBv3 Vulnerability (CVE-2020-1206)

Tenable

The updates this month include patches for Microsoft Windows, Microsoft Edge, ChakraCore, Internet Explorer, Microsoft Office, Microsoft Office Services and Web Apps, Windows Defender, Microsoft Dynamics, Visual Studio, Azure DevOps and Adobe Flash Player. This flaw can be exploited on an authenticated server or against an SMB client.

SMB 106