Microsoft takes months to fix critical Azure Synapse bug - TechTarget

Orca Security discovered that inadequate tenant separation in Microsoft's Azure Synapse service could allow a threat actor to steal credentials from thousands of customers.

Microsoft failed to adequately fix a critical flaw in Azure Synapse for months, according to a report from Orca Security. The vulnerability, dubbed "SynLapse," was discovered by Orca Security resear… [+4468 chars]

full article...