Ankura CTIX FLASH Update - October 21, 2022

Ransomware/Malware Activity

Microsoft Confirms Misconfigured Storage Location Incident Dubbed "BlueBleed"

On October 19, 2022, Microsoft confirmed that thousands of users' sensitive information was exposed due to a security incident dubbed "BlueBleed". BlueBleed was discovered by cybersecurity company SOCRadar on September 24, 2022, and is the misconfiguration of six (6) storage buckets collectively from one misconfigured Microsoft endpoint. In their blogpost about the incident, SOCRadar stated "The first part of the collection is due to a misconfigured Azure Blob Storage. It can be considered one of the most significant B2B leaks, affecting more than 65,000 entities in 111 countries with sensitive data inside a single Bucket." The researchers explained that the exposure allegedly amounts to approximately 2.4 terabytes (TB) of data, which is now publicly available and potentially consists of invoices, various business documents, emails, stocks, sales strategies,