Microsoft rejects critical Azure vulnerability report, no CVE issued

Multiple high-impact security incidents and active exploits were reported across cloud, supply-chain, endpoint and web ecosystems. Notable items include an alleged silently fixed Azure Backup for AKS issue with no CVE issued, a modularized Kazuar P2P backdoor by Russian threat group Secret Blizzard, active exploitation of WordPress plugin vulnerabilities (Funnel Builder, Avada Builder, Burst Statistics) to steal credentials and payment data, a credential-stealing supply-chain compromise of the node-ipc npm package and related TanStack supply-chain impacts (affecting OpenAI), Microsoft Exchange