{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/azure-ai-services/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Azure AI Services","Azure AI Foundry"],"_cs_severities":["medium"],"_cs_tags":["credential-access","cloud-security","azure","llmjacking"],"_cs_type":"advisory","_cs_vendors":["Microsoft"],"content_html":"\u003cp\u003eMicrosoft Foundry (Azure AI Services) accounts store API keys that grant inference access across all model deployments, bypassing Entra ID conditional access. These accounts and projects also store connection secrets for downstream services such as Azure OpenAI, storage, and search. Threat actors use compromised high-privilege identities to retrieve these keys or secrets as a primary step for LLMjacking and lateral movement into connected data resources.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful retrieval of API keys enables unauthorized inference usage, leading to potential financial loss and data exposure. Disclosure of connection secrets allows attackers to pivot from an AI project to integrated Azure services.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMonitor Azure Activity Logs for administrative operations involving key listing, regeneration, or secret retrieval by high-privilege principals.\u003c/li\u003e\n\u003cli\u003ePrioritize the use of Entra ID authentication for AI services and set 'disableLocalAuth' on Foundry accounts where key-based access is not strictly required.\u003c/li\u003e\n\u003cli\u003eReview and audit high-privilege roles (e.g., Owner, Contributor) assigned to AI resource groups.\u003c/li\u003e\n\u003cli\u003eExclude automated service principals from monitoring via an allowlist if they require routine access to secrets for deployment pipelines.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-27T23:35:10Z","date_published":"2026-10-27T23:35:10Z","id":"https://feed.craftedsignal.io/briefs/2026-10-azure-ai-keys-access/","summary":"High-privilege Azure principals accessing Microsoft Foundry API keys or connection secrets are being monitored to prevent LLMjacking and unauthorized data pivoting.","title":"Microsoft Azure AI Foundry: Unauthorized API key and connection secret access","url":"https://feed.craftedsignal.io/briefs/2026-10-azure-ai-keys-access/"}],"language":"en","title":"CraftedSignal Threat Feed - Azure AI Services","version":"https://jsonfeed.org/version/1.1"}