Crossposted from Twitter
RT @GossiTheDog@twitter.com
Microsoft Azure silently install management agents on your Linux VMs, which now have RCE and LPE vulns.
Microsoft don’t have an auto update mechanism, so now you need to manually upgrade the agents you didn’t know existed as you didn’t install them. https://www.wiz.io/blog/secret-agent-exposes-azure-customers-to-unauthorized-code-execution
🐦🔗: https://twitter.com/GossiTheDog/status/1437896101756030982