scm ci
Azure DevOps: security advisories, deprecations and releases
Microsoft's DevOps service for repos, pipelines and boards.
- Items, 90 days
- 3
- Critical
- 0
- Last critical
- none
- This week
- 0
Security 1
- MEDIUM Cloudanix Threat Intelligence · 2 Oct 2026
Storm-3068
The threat actor Storm-3068 initiated an attack by compromising a user account through a self-service password reset process. After gaining control of the identity by registering their own authentication methods, the actor pivoted to Azure DevOps. They used legitimate administrative tools and scripts to enumerate repositories and pipelines. The actor then modified development pipelines to harvest Kubernetes credentials (kubeconfig files)…
Deprecations 2
- MEDIUM ACT BY 11 JAN 2027 endoflife.date · 13 Oct 2026
Azure DevOps Server 2017 reaches end of life on 2027-01-11
Azure DevOps Server 2017 reaches end of life on 2027-01-11, as listed by endoflife.date.
- LOW ACT BY 11 JAN 2027 endoflife.date · 2 Oct 2026
Azure DevOps Server 2017 reaches end of life on 2027-01-11
Azure DevOps Server 2017 reaches end of life on 2027-01-11, as listed by endoflife.date.
Only hear about Azure DevOps when it touches your stack
Tell Zero what you run. You get one email, and only on the days something above applies to you.