cybercrime.clubhttps://cybercrime.club/tags/microsoft/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usMon, 06 Apr 2026 10:09:15 -0400CVE-2026-32211: Azure MCP Server Ships with No Auth — Your DevOps Secrets Are One Request Awayhttps://cybercrime.club/posts/azure-mcp-server-cve-2026-32211-missing-auth-devops-data-exposure/Mon, 06 Apr 2026 10:09:15 -0400https://cybercrime.club/posts/azure-mcp-server-cve-2026-32211-missing-auth-devops-data-exposure/Critical CVSS 9.1 flaw in Azure MCP Server has zero authentication on critical functions, exposing API keys, tokens, repos, and pipeline configs to unauthenticated attackers. No patch available.Vulnerabilities