Lost in Resolution: Azure OpenAI's DNS Resolution Issue
ID: 39d4955c-c58c-57ec-bda8-bec276c3238e
STIX ID: report--39d4955c-c58c-57ec-bda8-bec276c3238e
Feed Name: Palo Alto Networks Unit 42
Threat Score
Unit 42 discovered that a misconfiguration in Azure OpenAI's domain handling allowed a shared custom domain (test.openai.azure.com) to resolve to an external non-Azure IP (66.66.66.66), creating the potential for cross-tenant data leaks and man-in-the-middle interception of API calls and credentials; Microsoft corrected the DNS records within days of disclosure.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.