Microsoft recently patched three vulnerabilities in its Azure API Management service, two of which enabled server-side request forgery (SSRF) attacks that could have allowed hackers to access ...

The vulnerabilities comprise url formatting bypasses and an unrestricted file upload functionality in the API Management developer portal, according to cybersecurity firm Ermetic.

Microsoft has purchased Washington, D.C. startup Apiphany, a maker of an application-programming-interface management platform, which it plans to make available as part of Windows Azure.