A Critical Remote Code Execution vulnerability in Veeam Backup for Azure was automatically addressed

Last week, Veeam identified a critical vulnerability in a component of its Backup for Microsoft Azure solution, that allows attackers to bypass authentication mechanisms and execute arbitrary code.   About Veeam Backup for Microsoft Azure Veeam Backup for Microsoft Azure is a solution offered by Veeam to backup and restore Azure IaaS-based virtual machines and … Continue reading "A Critical Remote Code Execution vulnerability in Veeam Backup for Azure was automatically addressed"

Identity-related sessions at Microsoft Build 2020

Microsoft organizes Microsoft Build 2020 as a free digital event between Tuesday May 19th 8AM Pacific Time and Thursday May 21st 8 AM Pacific Time. Microsoft Build is Microsoft’s annual conference event, aimed at software engineers and web developers using Windows, Microsoft Azure and other Microsoft technologies. First held in 2011, it serves as a … Continue reading "Identity-related sessions at Microsoft Build 2020"

Happy 10th Birthday, Azure!

On February 1, 2010, Microsoft made its Windows Azure service Generally Available. This means, Microsoft Azure is celebrating its 10th birthday today! Birthdays are a new start, a fresh beginning and a time to pursue new endeavors with new goals. Move forward with confidence and courage. May today and all of your days be amazing! … Continue reading "Happy 10th Birthday, Azure!"

Security Thoughts: Veeam Backup & Replication leaks Azure Password in log

In Veeam Backup and Replication 9.5 versions prior to Update 4, the password for the Microsoft Azure account used by the Direct Restore to Azure functionality can be found in the log in plain text. Veeam Backup and Replication is used by a lot of organizations worldwide to create and restore backups of systems, applications … Continue reading "Security Thoughts: Veeam Backup & Replication leaks Azure Password in log"

Azure Multi-Factor Authentication Server 8.0.1.1 was released

Roughly four months ago, we saw the release of a new major version of Microsoft’s Azure Multi-Factor Authentication (MFA) Server, version 8.0.0.3. Last week, Microsoft released a minor version, dubbed version 8.0.1.1 that addresses a couple of issues you might experience with version 8.0.0.3.   What’s New Incompatibility with Japanese Windows installations The team fixed … Continue reading "Azure Multi-Factor Authentication Server 8.0.1.1 was released"

Azure Multi-Factor Authentication Server 8.0.0.3 is here

When looking back, I realized we’ve been working with Microsoft’s on-premises Azure Multi-Factor Authentication (MFA) Server version  7.3.0.3 for a year. This week, Microsoft released a new version of it’s on-premises authentication security product: version 8.0.0.3.   What’s New Registration experience improvements on mobile Using MFA Server’s mobile portal, end-users may register the authenticator app … Continue reading "Azure Multi-Factor Authentication Server 8.0.0.3 is here"

Configuring Geo-Redundancy for AD FS on-premises with Azure Traffic Manager

Last week, I showed you how to perform a simple Hybrid Identity implementation with AD FS on-premises. While this scenario is easy and fast to deploy, it also has a couple of downsides. One of them is the risk of ‘AD FS Unavailability’ and the inability to authenticate to cloud resources when the on-premises environment … Continue reading "Configuring Geo-Redundancy for AD FS on-premises with Azure Traffic Manager"