Rubrik adds recovery features for Azure DevOps and GitHub
The announced DevOps cyber recovery capabilities are expected to reach general availability in the coming months.
Stories per day · 30 days
5 stories, newest first · one card per story
Stories tagged #azure-devops
Hackers Turn One Compromised Account Into Access to Azure DevOps and Kubernetes
Microsoft attributes to Storm-3068 an intrusion that hijacked one account via password reset, then abused Azure DevOps pipelines to steal Kubernetes credentials.
2
Storm-3068 Hijacks Azure DevOps Pipelines to Steal Kubernetes Credentials After Account Takeover
Microsoft attributes an Azure DevOps intrusion to Storm-3068, who abused password resets to hijack accounts and steal Kubernetes kubeconfig files via malicious pipelines.
2
Beyond source code: A path to the keys to the kingdom
Microsoft DART details how Storm-3068 hijacked an account via self-service password reset, then used Azure DevOps pipelines to harvest Kubernetes credentials across 50+ resources.
1
Version Control DFIR: a Cheatsheet to GitHub, GitLab, Bitbucket, and Azure DevOps
Wiz published a DFIR cheatsheet covering log visibility, incident readiness, and threat hunting across GitHub, GitLab, Bitbucket, and Azure DevOps.