Microsoft Azure Network Security

Foreword

I am writing this foreword amid one of the largest and most invasive cybersecurity breaches in history—Solorigate. A sophisticated, nation-state actor was able to infiltrate a well-known supplier of network monitoring and management solutions. The threat actor injected a backdoor into the supplier’s build system, and the backdoor was then signed with a valid certificate and pushed to approximately 18,000 customers. What made this attack particularly novel was the fact that the threat actor leveraged their access to on-premises systems to then pivot and begin accessing cloud services, which appeared to be their primary target. The attacker also attempted to hide their level of access by leveraging Azure Service Principals to blend in ...