Skip to content
Threat Feed
Subscribe

Product

Azure Blob Storage

4 briefs RSS
high advisory

GitHub CLI Incorrectly Includes Authorization Header in API Requests

GitHub CLI versions 2.92.0 and earlier incorrectly include authorization headers in API requests to TUF repository mirrors and external hosts when using the `gh attestation`, `gh release verify`, and `gh release verify-asset` commands, potentially exposing sensitive tokens.

cli/cli/v2 +1 github cli token leakage api
2r 1t 3i
medium advisory

Azure Blob Storage Permissions Modified for Defense Evasion

An adversary may modify Azure Blob Storage permissions to weaken security controls, leading to potential data exposure or loss; this rule detects such modifications by monitoring Azure activity logs for specific operations related to permission changes on blobs.

Azure Blob Storage azure cloud defense_evasion
2r 1t
medium advisory

Abnormally High Number of Cloud Infrastructure API Calls

Detection of an abnormally high number of cloud infrastructure API calls, indicating potential malicious activity or misconfiguration in a cloud environment.

Amazon S3 +1 cloud api-abuse anomaly-detection
2r 2t
medium advisory

Azure Blob Storage Container Access Level Modified

The rule identifies modifications to Azure Blob Storage container access levels, which, if unauthorized, may lead to data exposure and exfiltration.

Azure Blob Storage cloud azure asset-visibility discovery
2r 3t