Black October: what the label hides
Most of what circulated as 'Black October' doesn't hold up. What's actually confirmed, what it means for a regulated Azure estate, and the one query I'd run first.
2 posts
Most of what circulated as 'Black October' doesn't hold up. What's actually confirmed, what it means for a regulated Azure estate, and the one query I'd run first.
PCI DSS v4.0.1 has been fully enforced for a while now. These are the three things I keep finding on regulated Azure estates that fail an audit – network segmentation, log retention and key rotation – and how I deal with each one in Azure.