olearysec

3 ms·

1. 1.▲
   Google Said 'Nice Catch' Then Denied Bounty(theregister.com)

   6 points by olearysec 4mo ago|0 comments
2. 2.▲
   by olearysec 5mo ago

   I'm the researcher. You've nailed it — Backup Contributor automatically granted cluster-admin via Trusted Access, no K8s permissions required. Microsoft called it "expected behavior," then silently patched it. Full write
3. 3.▲
   Microsoft rejects critical Azure vulnerability report, no CVE issued(bleepingcomputer.com)

   5 points by olearysec 5mo ago|1 comments