Azure AI Services - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/azure-ai-services/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 27 Oct 2026 23:35:10 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgMicrosoft Azure AI Foundry: Unauthorized API key and connection secret accesshttps://feed.craftedsignal.io/briefs/2026-10-azure-ai-keys-access/Tue, 27 Oct 2026 23:35:10 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-azure-ai-keys-access/High-privilege Azure principals accessing Microsoft Foundry API keys or connection secrets are being monitored to prevent LLMjacking and unauthorized data pivoting.Microsoft Foundry (Azure AI Services) accounts store API keys that grant inference access across all model deployments, bypassing Entra ID conditional access. These accounts and projects also store connection secrets for downstream services such as Azure OpenAI, storage, and search. Threat actors use compromised high-privilege identities to retrieve these keys or secrets as a primary step for LLMjacking and lateral movement into connected data resources.

Impact

Successful retrieval of API keys enables unauthorized inference usage, leading to potential financial loss and data exposure. Disclosure of connection secrets allows attackers to pivot from an AI project to integrated Azure services.

Recommendation

  • Monitor Azure Activity Logs for administrative operations involving key listing, regeneration, or secret retrieval by high-privilege principals.
  • Prioritize the use of Entra ID authentication for AI services and set 'disableLocalAuth' on Foundry accounts where key-based access is not strictly required.
  • Review and audit high-privilege roles (e.g., Owner, Contributor) assigned to AI resource groups.
  • Exclude automated service principals from monitoring via an allowlist if they require routine access to secrets for deployment pipelines.
]]>mediumadvisorycredential-accesscloud-securityazurellmjacking