Azure AD Credentials Exposed in Public App Settings File
A cybersecurity assessment has uncovered a serious vulnerability involving Azure Active Directory (Azure AD). Resecurity’s HUNTER Team discovered that application…
Tag: credentials
JSON Config File Leaks Azure ActiveDirectory Credentials – Dark Reading
JSON Config File Leaks Azure ActiveDirectory Credentials Dark Reading Article Source https://www.darkreading.com/cybersecurity-operations/public-file-leaks-azure-activedirectory-credentials
Azure AD Vulnerability Leaks Credentials, Lets Attackers Deploy Malicious Apps
Exposing an ASP.NET Core appsettings.json file containing Azure Active Directory (Azure AD) credentials poses a critical attack vector, effectively handing adversaries…
Azure AD Credentials Leak Puts Cloud at Risk – Petri IT Knowledgebase
Azure AD Credentials Leak Puts Cloud at Risk Petri IT Knowledgebase Article Source https://petri.com/azure-ad-credentials-leak-json-cloud-attack/
Azure AD credentials exposed by unsecured JSON config file – SC Media
Azure AD credentials exposed by unsecured JSON config file SC Media Article Source https://www.scworld.com/brief/azure-ad-credentials-exposed-by-unsecured-json-config-file
Hardcoded root credentials in Cisco Unified CM trigger max-severity alert
For Immediate Release 2025-07-03 12:42:00 The affected products-Cisco Unified CM and Unified CM SME–are core components of enterprise telephony infrastructure,…
Cisco warns that Unified CM has hardcoded root SSH credentials
For Immediate Release 2025-07-02 17:08:00 Cisco has removed a backdoor account from its Unified Communications Manager (Unified CM), which would…
Critical Cisco Vulnerability in Unified CM Grants Root Access via Static Credentials
For Immediate Release 2025-07-03 04:24:00 Jul 03, 2025Ravie LakshmananVulnerability / Network Security Cisco has released security updates to address a…
Cisco Warns of Hardcoded Credentials in Enterprise Software – SecurityWeek
For Immediate Release 2025-07-03 11:26:00 Cisco Warns of Hardcoded Credentials in Enterprise Software SecurityWeek Article Source https://www.securityweek.com/cisco-warns-of-hardcoded-credentials-in-enterprise-software/
CVE-2025-20309: Cisco Unified Communications Manager Static SSH Credentials Maximum Severity Vulnerability | Arctic Wolf
For Immediate Release 2025-07-03 18:16:00 CVE-2025-20309: Cisco Unified Communications Manager Static SSH Credentials Maximum Severity Vulnerability Arctic Wolf Article Source https://arcticwolf.com/resources/blog/cve-2025-20309/