90 days, 16 bugs, and an Azure Sphere Challenge
Summary: Microsoft launched the Azure Sphere Security Research Challenge on May 15, 2020, a three-month initiative to find bugs in the Azure Sphere IoT platform, and Cisco Talos reported 16 vulnerabilities of various severity, including a privilege escalation chain to acquire Azure Sphere Capabilities. Talos noted that monthly updates (20.07, 20.08, 20.09) repeatedly broke its privilege escalation chains and that roughly 70 researchers working simultaneously favored those who could move quickly with less tooling.
What you should know: Talos argues the monthly patch cadence, while good for fixing known bugs, left higher-value attack surfaces like Pluton and the security monitor largely unexamined because researchers were handicapped in ways an attacker never would be.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Mentions
- CVE-2020-35608CVE-2020-35609
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026