The article explains how an attacker can abuse legitimate Azure third-party VM extensions, specifically Chef, to achieve undetected code execution and maintain access on Windows or Linux virtual machines. It demonstrates a rogue Chef server attack that uses a malicious cookbook to steal the VM’s Managed Identity token and exfiltrate it to an out-of-band endpoint. #Chef #Azure #ManagedIdentity #chef-zero #oastify

How a dedicated Azure API Management Workspace Gateway can still use the managed identity of its parent APIM service.

Graph Permissions in a managed identity? In this eoconomy???? - GitHub - tabs-not-spaces/Az.MsiGraphPermissions: Graph Permissions in a managed identity? In this eoconomy????

Struggling with Azure credential management in your CI/CD pipelines? Both Azure and GitHub Actions now support OpenID Connect (OIDC) for secure deployments by simplifying the process, and aligning with modern security practices. With GitHub’s OIDC provider, you can authenticate directly from your workflows using managed identities without the need for static access keys.

Run-From-Package con managed identity: despliegue de Logic Apps Standard en ASE privado sin SAS, sin SCM y con los 6 errores reales a evitar.

Compartí una conexión managed entre varias Logic Apps y controlá quién la usa a nivel ARM con Managed Identity. Sin duplicar infraestructura.

Janne Mattila’s blog | From programmer to programmer – Programming just for the fun of it

Today, I want to share two key points from the entry "Sec...

Today, I want to share two key points from the entry "Securely Connecting Azure Container Apps to Azure OpenAI using User Managed Identity":

There seem to be multiple possible causes.

Hi there, currently I use _**smolagents**_ with **AzureOpenAIServerModel**() and an API key. Now I have to switch to Active Directory authentication with **DefaultAzureCredential** or **ManagedIdentityCredential** , but with smolagent’s **AzureOpenAIServerModel** or **OpenAIServerModel** it is not working. Any idea on that? I would like to keep smolagents as framework for my agents. model = AzureOpenAIServerModel( model_id = AZURE_OPENAI_MODEL, azure_endpoint = AZURE_OPENAI_ENDPOINT, api_key = AZURE_OPENAI_API_KEY, api_version = OPENAI_API_VERSION ) Thanks and BR, Ingo

Microsoft Authentication Library (MSAL) for .NET. Contribute to AzureAD/microsoft-authentication-library-for-dotnet development by creating an account on GitHub.