Azure Service Tags Vulnerability: Microsoft Warns of Potential Abuse by Hackers

Microsoft and Tenable disclosed that Azure Service Tags can be abused to forge requests that impersonate trusted Azure services and bypass network controls, affecting around ten Azure services (e.g., Application Insights, DevOps, Machine Learning, Logic Apps, Container Registry). Microsoft updated its documentation to state service tags are not a security boundary and recommends customers implement additional validation and authentication controls.