👩‍💻 Backdooring Managed Identities via Azure API Management

Azure API Management exposes managed identity certificates with private keys in plaintext through an undocumented configuration API used by self-hosted gateways. Attackers with gateway keys can extract these certificates for persistent backdoor access.

https://dazesecurity.io/blog/apimMIVuln

(Use VPN to open from Russia)

#azure