Remove author mark-lambert
article thumbnail

Abusing Azure Container Registry Tasks

Security Boulevard

This concept of chaining disparate, seemingly low-risk and unrelated configurations into devastating attack paths is elegantly summarized by John Lambert: ?—? This tells Azure that the task runner is authorized to authenticate to Azure services as that service principal, without needing to provide a credential. The Execution.