msandbu

Azure Deployment Environments – Self-service Azure

One of the things that we have been trying to solve repeatedly is a way to provide self-service mechanisms for developers when it comes to building public cloud services. Where we want to provide developers with a predefined service catalog that contains different packaged services or even a full environment that they can order on-demand. …

Azure Deployment Environments – Self-service Azure Read More »

Security Vulnerability in OpenSSL CVE-2022-3602 (RCE) and CVE-2022-3786 (DOS)

Earlier today a new Security Vulnerability was disclosed in the popular OpenSSL (libssl) Library (affecting products using OpenSSL 3.0.0-3.0.6.) which affects most software companies in the world. The OpenSSL team released an updated version of the library today 3.0.7. OpenSSL CVE-2022-3602 (RCE) and CVE-2022-3786 (DOS) published earlier today and was fixed in the release 3.0.7 NOTE: …

Security Vulnerability in OpenSSL CVE-2022-3602 (RCE) and CVE-2022-3786 (DOS) Read More »

Microsoft Premium V2 SSD – CSI v2 and AKS PVC Resizing

Microsoft has recently released Premium SSD P2 Disk. This new feature is highlighting a change in the underlying architecture of the storage service in Azure. Before this v2 release, the performance of a disk was always associated with the size of the disk. With the v2 release, there are numerous improvements to the disk service. …

Microsoft Premium V2 SSD – CSI v2 and AKS PVC Resizing Read More »

Azure DDoS IP Protection

Last week during Ignite 2022, Microsoft released a public preview of a new DDoS feature called IP-based protection which is aimed at protecting DDoS attacks on layer 4 (namely TCP SYN Flood attacks) When looking at the statistics for Q3 this year from the blog from Cloudflare, the most predominant form of DDoS attacks is …

Azure DDoS IP Protection Read More »

Deployment of Azure Container Apps with Volume Mounts using Terraform

Recently with working with a customer, we wanted to set up Azure Container Apps with Volume Mounts using CI/CD with Terraform. Until now, the only option has been to configure it using Azure CLI. However! last week Microsoft introduced some new part of the API that allows us to manage this using Azure Resource Manager …

Deployment of Azure Container Apps with Volume Mounts using Terraform Read More »

Microsoft Defender falsely detecting Win32/Hive.ZY

Just a quick post, after a recent signature update to Microsoft Defender (This one –> Antimalware updates change log – Microsoft Security Intelligence)  you might get these events from Defender. This was a false positive and has been fixed in the latest signature updates from Microsoft Antimalware updates change log – Microsoft Security Intelligence (1.373.1537.0)

Getting started with Microsoft Defender EASM (External Attack Surface Management)

About a week ago, Microsoft released a new product called Microsoft Defender EASM which is based upon an earlier product from RiskIQ and is now a part of Microsoft Azure. You can look at this as a Shodan-light alternative where you can see your organization from an outside view—looking at what kind of external services …

Getting started with Microsoft Defender EASM (External Attack Surface Management) Read More »

Scroll to Top