From 37d9e9563aaf5fb97d67bca75f627599284fe6d6 Mon Sep 17 00:00:00 2001
From: staleycyn <45440075+staleycyn@users.noreply.github.com>
Date: Mon, 7 Feb 2022 06:49:09 -0800
Subject: [PATCH] Update readme.md

---
 readme.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/readme.md b/readme.md
index 0a7e8fe9..554a0df3 100644
--- a/readme.md
+++ b/readme.md
@@ -5,6 +5,13 @@
 - **[Link to labs (HTML format)](https://microsoftlearning.github.io/AZ-104-MicrosoftAzureAdministrator/)**
 - **Are you a MCT?** - Have a look at our [GitHub User Guide for MCTs](https://microsoftlearning.github.io/MCT-User-Guide/)
 
+## Security Issue - February 2022
+
+Some Azure training labs instruct the student to use a specific user name and password. Bad actors constantly scan virtual machines and try to log in using those credentials.
+One they login they use the machines for crypto-mining, and could potentially use them for other activities.
+
+**Remediation**: Students should be instructed to use a password of their own choosing. Students should not use the password in the lab instructions. The lab steps will be updated this week to remove the password. 
+
 ## What are we doing?
 
 - To support this course, we will need to make frequent updates to the course content to keep it current with the Azure services used in the course.  We are publishing the lab instructions and lab files on GitHub to allow for open contributions between the course authors and MCTs to keep the content current with changes in the Azure platform.