The Cloud Gray Zone: Vulnerabilities Found in Azure Built-in VM Agents
summary
Researchers describe critical vulnerabilities discovered in Microsoft Azure’s built-in virtual machine agents that run inside customer VMs. They detail the risks these provider-managed agents introduce for almost all Azure customers and discuss the question of responsibility for patching or mitigating those flaws.
AI-written summary · about
chapters (20)
- 0:00Intro
- 1:19Basic Management
- 2:03Virtual Machines Management
- 3:25Agents Have Security Implications
- 6:31The Shared Responsibility Model
- 7:47Session Outline
- 8:45Cloud Middleware in Azure
- 10:28How to Find Cloud Middleware Software
- 14:19OMI Attack Surface
- 18:31OMI Processes
- 18:53OMI Architecture Overview
- 21:50OMI Execution Flow
- 26:20What Language Are You Speaking?
- 27:53OMI Remote Communication
- 28:19Regular OMI Remote Command Request
- 29:02Basic Logic
- 33:20The Patching Moment
- 33:56Releasing a New Version
- 38:10Lack of Transparency
- 39:48Cloud Middleware Dataset
related talks
41mUncovering Azure's Silent Threats: A Journey into Cloud Vulnerabilities
52mUncovering Azure's Silent Threats: A Journey Into Cloud Vulnerabilities
57mCloud’s Dirty Little Secret: It Was Misconfigs All Along
49mAzure DevOps security - Lessons learned
43mDefending the Cloud: Securing Your Microsoft Data Workloads
48mLateral Movement in the Age of Hybrid Cloud
47mAzure Vulnerability Testbed (AzGOAT)
51mAnalysis of the Attack Surface of Windows 10 Virtualization-Based Security