Nullcon Goa 2023 | Uncovering Azure's Silent Threats: A Journey Into Cloud Vulnerabilities by Nitesh

In this talk, Nitesh Surana explores the security vulnerabilities discovered in Azure ML, Microsoft's managed Machine Learning as a Service platform. He addresses five critical vulnerabilities across three main categories of security issues, revealing how insecure logging of sensitive information and API exposure can lead to potential exploits. Through detailed analysis, the speaker demonstrates techniques for assessing the security posture of cloud services, especially in the context of the shared responsibility model. Attendees will gain insights into the security pitfalls associated with AI and ML systems, as well as practical approaches for identifying and mitigating these risks.