{"id":50187,"date":"2023-01-19T23:14:00","date_gmt":"2023-01-19T23:14:00","guid":{"rendered":"https:\/\/www.darkreading.com\/cloud\/emojideploy-attack-chain-targets-misconfigured-azure-service"},"modified":"2023-01-19T23:14:00","modified_gmt":"2023-01-19T23:14:00","slug":"emojideploy-attack-chain-targets-misconfigured-azure-service","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/emojideploy-attack-chain-targets-misconfigured-azure-service\/","title":{"rendered":"EmojiDeploy Attack Chain Targets Misconfigured Azure Service"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt978bae1c09a8859c\/6390f8a07d5b9c3805b266b5\/cloud_JLStock_shutterstock.jpg\" class=\"ff-og-image-inserted\"><\/div>\n<p>An attack chain exploiting misconfigurations and weak security controls in a common Azure service is highlighting how lack of visibility impacts the security of cloud platforms.<\/p>\n<p>The &#8220;EmojiDeploy&#8221; attack chain could allow a threat actor to run arbitrary code with the permission of the Web server, steal or delete sensitive data, and compromise a targeted application, Ermetic stated in its <a href=\"https:\/\/ermetic.com\/blog\/azure\/emojideploy-smile-your-azure-web-service-just-got-rced\/\" target=\"_blank\" rel=\"noopener\">Jan. 19 advisory<\/a>. An attacker could use a trio of security issues affecting the common Source Code Management (SCM) service \u2014 a cloud service used by many Azure applications without an explicit indication to the user, according to Ermetic.<\/p>\n<p>The issues demonstrate that the security of cloud platforms are undermined by the lack of visibility into what those platforms do under the hood, says Igal Gofman, head of research for Ermetic.<\/p>\n<p>&#8220;Azure and cloud service consumers \u2014 enterprises \u2014 must be familiar with each service and its internals, and not trust [that the] default settings provided by cloud providers are always secure,&#8221; he says. &#8220;Even though cloud providers spend millions of dollars on securing their cloud infrastructure, misconfigurations and security bugs will happen.&#8221;<\/p>\n<p>The <a href=\"https:\/\/ermetic.com\/blog\/azure\/emojideploy-smile-your-azure-web-service-just-got-rced\" target=\"_blank\" rel=\"noopener\">EmojiDeploy research<\/a> joins other attack chains recently discovered by security researchers that could have resulted in data breaches on cloud platforms or otherwise compromised cloud services. In October 2022, for example, researchers <a href=\"https:\/\/www.darkreading.com\/vulnerabilities-threats\/atlassian-vulnerabilities-highlight-criticality-cloud-services\" target=\"_blank\" rel=\"noopener\">found two vulnerabilities in Atlassian&#8217;s Jira Align<\/a>, an agile project management application, that could have allowed threat groups to attack the Atlassian service. In January 2022, Amazon fixed two security issues in its Amazon Web Services (AWS) platform that could have allowed a user to <a href=\"https:\/\/www.darkreading.com\/cloud\/new-vulnerabilities-highlight-risks-of-trust-in-public-cloud\" target=\"_blank\" rel=\"noopener\">take control of another customer&#8217;s cloud infrastructure<\/a>.<\/p>\n<p>An attacker only needs to take <a href=\"https:\/\/www.darkreading.com\/cloud\/cyberattackers-compromise-most-cloud-data-3-steps\" target=\"_blank\" rel=\"noopener\">an average of three steps<\/a> \u2014 often starting, in 78% of cases, with a vulnerability \u2014 to compromise sensitive data on cloud services, one analysis found.<\/p>\n<p>&#8220;Cloud systems are highly complex,&#8221; Ermetic stated. &#8220;Understanding the complexity of the system and environment you are working in is crucial to defending it.&#8221;<\/p>\n<h2 class=\"regular-text\">Source Code Manager Exploit<\/h2>\n<p>The attack found by Ermetic made use of the insecurity of a specific cookie configuration for the Source Code Manager (SCM). The Azure service set two controls \u2014 cross-site scripting (XSS) prevention and cross-site request forgery (XSRF) prevention \u2014 to a default of &#8220;Lax,&#8221; according to Ermetic&#8217;s advisory.<\/p>\n<p>After further investigating the implications of those settings, Ermetic researchers found that those who use any of three common Azure services \u2014 Azure App Service, Azure Functions, and Azure Logic Apps \u2014 could be attacked through the vulnerability. The attack was made possible because these three major services all use the Source Code Management (SCM) panel to allow development and Web teams to manage their Azure application. Because SCM relies on the open source Kudu repository management project, which is a .NET framework similar to Git, a cross-site scripting vulnerability in the open source project also affects Azure SCM.<\/p>\n<p>Unfortunately, the security setting is not obvious, Ermetic stated, adding that many <span>Azure Web Services customers <\/span>would not even know of the existence of the <span>SCM panel.<\/span><\/p>\n<p>A single vulnerability is not enough, however. The researchers paired the lax cookie security with a specially crafted URL that bypasses the cloud service&#8217;s check that every component of the website came from the same origin. Combining the two components allows a full cross-origin attack, Ermetic stated in its advisory. A third weakness allowed specific actions or payloads to be incorporated into the attack as well.<\/p>\n<h2 class=\"regular-text\">Shared Responsibility Means Configuration Transparency<\/h2>\n<p>The attack chain underscores that cloud providers need to make their security controls more transparent and default to more secure configurations, says Ermetic&#8217;s Gofman. While shared responsibility has long been the mantra of cloud security, cloud infrastructure services have not always offered easy access or integration to security controls.<\/p>\n<p>&#8220;Awareness of default service settings and configurations is important since the cloud uses a shared responsibility model for security between the provider and the customer,&#8221; he says. &#8220;Applying the principle of least privilege and being aware of the shared responsibility model is very important.&#8221;<\/p>\n<p>Emetic notified Microsoft of the attack chain in October, and the vendor issued a global fix for Azure by early December, according to the advisory.<\/p>\n<p>&#8220;The impact of the vulnerability on the organization as a whole depends on the permissions of the applications managed identity,&#8221; Ermetic stated in its advisory. &#8220;Effectively applying the principle of least privilege can significantly limit the blast radius.&#8221;<\/p>\n<p>Read More <a href=\"https:\/\/www.darkreading.com\/cloud\/emojideploy-attack-chain-targets-misconfigured-azure-service\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Multiple misconfigurations in a service that underpins many Azure features could have allowed an attacker to remotely compromise a cloud user&#8217;s system.Read More <a href=\"https:\/\/www.darkreading.com\/cloud\/emojideploy-attack-chain-targets-misconfigured-azure-service\">HERE<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[151],"tags":[],"class_list":["post-50187","post","type-post","status-publish","format-standard","hentry","category-darkreading-ti"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>EmojiDeploy Attack Chain Targets Misconfigured Azure Service 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/emojideploy-attack-chain-targets-misconfigured-azure-service\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"EmojiDeploy Attack Chain Targets Misconfigured Azure Service 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/emojideploy-attack-chain-targets-misconfigured-azure-service\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2023-01-19T23:14:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt978bae1c09a8859c\/6390f8a07d5b9c3805b266b5\/cloud_JLStock_shutterstock.jpg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/emojideploy-attack-chain-targets-misconfigured-azure-service\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/emojideploy-attack-chain-targets-misconfigured-azure-service\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"EmojiDeploy Attack Chain Targets Misconfigured Azure Service\",\"datePublished\":\"2023-01-19T23:14:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/emojideploy-attack-chain-targets-misconfigured-azure-service\\\/\"},\"wordCount\":731,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/emojideploy-attack-chain-targets-misconfigured-azure-service\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blt978bae1c09a8859c\\\/6390f8a07d5b9c3805b266b5\\\/cloud_JLStock_shutterstock.jpg\",\"articleSection\":[\"DarkReading |TI\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/emojideploy-attack-chain-targets-misconfigured-azure-service\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/emojideploy-attack-chain-targets-misconfigured-azure-service\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/emojideploy-attack-chain-targets-misconfigured-azure-service\\\/\",\"name\":\"EmojiDeploy Attack Chain Targets Misconfigured Azure Service 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/emojideploy-attack-chain-targets-misconfigured-azure-service\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/emojideploy-attack-chain-targets-misconfigured-azure-service\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blt978bae1c09a8859c\\\/6390f8a07d5b9c3805b266b5\\\/cloud_JLStock_shutterstock.jpg\",\"datePublished\":\"2023-01-19T23:14:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/emojideploy-attack-chain-targets-misconfigured-azure-service\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/emojideploy-attack-chain-targets-misconfigured-azure-service\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/emojideploy-attack-chain-targets-misconfigured-azure-service\\\/#primaryimage\",\"url\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blt978bae1c09a8859c\\\/6390f8a07d5b9c3805b266b5\\\/cloud_JLStock_shutterstock.jpg\",\"contentUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blt978bae1c09a8859c\\\/6390f8a07d5b9c3805b266b5\\\/cloud_JLStock_shutterstock.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/emojideploy-attack-chain-targets-misconfigured-azure-service\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"EmojiDeploy Attack Chain Targets Misconfigured Azure Service\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"EmojiDeploy Attack Chain Targets Misconfigured Azure Service 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/emojideploy-attack-chain-targets-misconfigured-azure-service\/","og_locale":"en_US","og_type":"article","og_title":"EmojiDeploy Attack Chain Targets Misconfigured Azure Service 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/emojideploy-attack-chain-targets-misconfigured-azure-service\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2023-01-19T23:14:00+00:00","og_image":[{"url":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt978bae1c09a8859c\/6390f8a07d5b9c3805b266b5\/cloud_JLStock_shutterstock.jpg","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/emojideploy-attack-chain-targets-misconfigured-azure-service\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/emojideploy-attack-chain-targets-misconfigured-azure-service\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"EmojiDeploy Attack Chain Targets Misconfigured Azure Service","datePublished":"2023-01-19T23:14:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/emojideploy-attack-chain-targets-misconfigured-azure-service\/"},"wordCount":731,"commentCount":0,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/emojideploy-attack-chain-targets-misconfigured-azure-service\/#primaryimage"},"thumbnailUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt978bae1c09a8859c\/6390f8a07d5b9c3805b266b5\/cloud_JLStock_shutterstock.jpg","articleSection":["DarkReading |TI"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.threatshub.org\/blog\/emojideploy-attack-chain-targets-misconfigured-azure-service\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/emojideploy-attack-chain-targets-misconfigured-azure-service\/","url":"https:\/\/www.threatshub.org\/blog\/emojideploy-attack-chain-targets-misconfigured-azure-service\/","name":"EmojiDeploy Attack Chain Targets Misconfigured Azure Service 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/emojideploy-attack-chain-targets-misconfigured-azure-service\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/emojideploy-attack-chain-targets-misconfigured-azure-service\/#primaryimage"},"thumbnailUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt978bae1c09a8859c\/6390f8a07d5b9c3805b266b5\/cloud_JLStock_shutterstock.jpg","datePublished":"2023-01-19T23:14:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/emojideploy-attack-chain-targets-misconfigured-azure-service\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/emojideploy-attack-chain-targets-misconfigured-azure-service\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/emojideploy-attack-chain-targets-misconfigured-azure-service\/#primaryimage","url":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt978bae1c09a8859c\/6390f8a07d5b9c3805b266b5\/cloud_JLStock_shutterstock.jpg","contentUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt978bae1c09a8859c\/6390f8a07d5b9c3805b266b5\/cloud_JLStock_shutterstock.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/emojideploy-attack-chain-targets-misconfigured-azure-service\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"EmojiDeploy Attack Chain Targets Misconfigured Azure Service"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/50187","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=50187"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/50187\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=50187"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=50187"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=50187"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}