Recent Stories
Keeping the Human in Medicine: Two AI CoLab Researchers on What Machines Can’t ReplaceSomeone Is Hacking the Freezers. Pay Attention.Thinking of Running in 2028? Start HereWhat the Lame Duck Session Has to Do With the Ultimate 21st-Century Power Tool: RobotsBlack October Wasn't an Attack Wave. It Was a Warning.Extreme Ownership Means Ultimate Achievement – NASA Culture Shift

The Wave

← Back to the board
News

ChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz Blog

Why it’s here: This is an original technical vulnerability write-up from a cybersecurity specialist about a critical flaw in a major federal-cloud database service, covering CISA-aligned remediation guidance and cross-tenant exposure, which bears on cybersecurity policy and critical-infrastructure security.

Trace across the board

Item

  1. 5d agoWiz ResearchChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz BlogWiz Research reports that 82% of organizations grant third-party cloud vendors wide read access and 76% grant roles enabling full account takeover, based on an analysis of 1,300+ AWS accounts and 40+ vendors.
    10 articles
    1. 5d agoWiz ResearchWiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz Blog
    2. 5d agoWiz ResearchChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz Blog
    3. 5d agoWiz ResearchThe cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors | Wiz Blog
    4. 5d agoWiz ResearchHow we broke the cloud with two lines of code: the full story of ChaosDB | Wiz Blog
    5. 5d agoWiz ResearchBingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz Blog
    6. 5d agoWiz ResearchBingBang: How a simple developer mistake could have led to Bing.com takeover | Wiz Blog
    7. 5d agoWiz ResearchAttachMe: critical OCI vulnerability allows unauthorized access to customer cloud storage volumes | Wiz Blog
    8. 5d agoWiz ResearchChaosDB: How we hacked thousands of Azure customers’ databases | Wiz Blog
    9. 5d agoWiz Research“Secret” Agent Exposes Azure Customers To Unauthorized Code Execution | Wiz Blog
    10. 4d agoWiz ResearchPickupBreaking Down PHP2Shell with Sagi Tzadik & Thai Duong | Wiz
    Cyber161 linked

Coverage

1 outlets · first seen 5d ago

Connected

16 links

About

  • Microsoft
  • CISA
  • Wiz

Cookies

Analytics cookies help us see how the site is used. They only run if you accept. Privacy Policy

ChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz Blog — The Wave