News for hackers. Stuff that matters.

A comment on Microsoft Azure silently install management agents with vulns on your Linux VMs. Parent comment

Re:Microsoft Azure silently install management agents with v... by CyanLite2 on Wednesday September 15, 2021 @11:00AM (#28539994)
The basic firewall (Network Security Groups) blocks network access by default. So you have to grant the attacker access to the port and IP.
[ Parent | on HN ]
Re:Microsoft Azure silently install management agents with v... by acdha on Wednesday September 15, 2021 @11:08AM (#28540103)
Does it block access within the same group by default for the lateral motion case? That would definitely help somewhat, although it's certainly too common for people to have allow-all rules for internal traffic.
[ Parent | on HN ]
Re:Microsoft Azure silently install management agents with v... by mistrial9 on Wednesday September 15, 2021 @01:01PM (#28541574)
has no one replied that any VM that handles HTTP(s) traffic MUST open ports to start functioning, and is therefore fully vulnerable? what am I missing here
[ Parent | on HN ]
Re:Microsoft Azure silently install management agents with v... by belltaco on Wednesday September 15, 2021 @01:28PM (#28541915)
Opening http(s) ports != opening all ports, or even the ones that the management services run on

Open ports to webservers like Apache,nginx etc. aren't affected by this issue.

[ Parent | on HN ]