The attacker abused legitimate identity services, development tools, and trusted pipelines rather than relying on malware or software vulnerabilities. Microsoft’s Detection and Response Team, known as DART, investigated the incident. Its findings show how access to a development platform can expose cloud credentials and deployment infrastructure... Weiterlesen
Intelligence View
⚡ tsecurity.de Intelligence
Storm-3068 Uses Azure DevOps Pipelines to Harvest Kubeconfig Credentials and Reach Kubernetes
The attacker abused legitimate identity services, development tools, and trusted pipelines rather than relying on malware or software vulnerabilities. Microsoft’s Detection and Response Team, known as DART, investigated the incident. Its f…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR