Haakon Wik Gulbrandsrud

New Capabilities

Disclosed five critical Azure vulnerabilities; received $200,000 in bounties

A Norwegian security firm published details of five critical vulnerabilities in Azure API Connections, the credential store for Microsoft's Logic Apps service. Each flaw let an attacker in one Azure tenant reach into another tenant's connected services: Key Vaults, SQL databases, Jira, Salesforce.

Updated Oct 30