Note: I started this article last weekend to try and explain the attack path “Midnight Blizzard” used and what Azure admins should do to protect themselves from a similar attack. Unfortunately, I couldn’t complete/publish it in time and now there is another breach at Microsoft. (🤦🏿) Now, I had to completely redraft it and change … Read more
This article is intended for security enthusiasts or otherwise for people with an advanced understanding of Cryptography and some Programming. I have tried to give in some background theory a very basic implementation. Are there backdoors in AES and what is China’s response to it? The US NIST has been pushing AES as the standard … Read more
For anyone developing any application on the cloud, the major concern is always how is security implemented. Typically, you start with an authentication system viz. Usernames & Passwords. As your application grows in size of use cases and adoption, you’ll soon find a necessity to improve your security posture, these could range from MFA, Federated … Read more