Microsoft: Hackers target Azure cloud VMs via breached SQL servers
Hackers have been seen attempting to access cloud environments using SQL injection-prone Microsoft SQL Servers.
According to Microsoft's security researchers, attacks against other services like VMs and Kubernetes clusters have already used this lateral movement strategy.
However, they have never before observed the use of SQL Servers for this reason.The attacks that Microsoft has seen begin by taking advantage of an application's SQL injection vulnerability that is present in the target's environment.
Threat actors are then given higher permissions to access the SQL Server instance that is housed on the Azure Virtual Machine read more Hackers target Azure cloud VMs via breached SQL servers.
Stay informed with the best cybersecurity news and raise your cybersecurity awareness ...