Binary Security

New Capabilities

Disclosed the vulnerabilities; received bounties

A Norwegian security firm published details of five critical vulnerabilities in Azure API Connections, the credential store for Microsoft's Logic Apps service. Each flaw let an attacker in one Azure tenant reach into another tenant's connected services: Key Vaults, SQL databases, Jira, Salesforce.

Updated Oct 30