Recent Stories
Keeping the Human in Medicine: Two AI CoLab Researchers on What Machines Can’t ReplaceSomeone Is Hacking the Freezers. Pay Attention.Thinking of Running in 2028? Start HereWhat the Lame Duck Session Has to Do With the Ultimate 21st-Century Power Tool: RobotsBlack October Wasn't an Attack Wave. It Was a Warning.Extreme Ownership Means Ultimate Achievement – NASA Culture Shift

The Wave

← Back to the board
News

Wiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz Blog

Why it’s here: A specialist cybersecurity research disclosure of a critical cross-tenant vulnerability in Azure's managed PostgreSQL service, which bears on cloud tenant isolation and federal cloud security policy even though it lacks an explicit policy hook.

Trace across the board

Item

  1. 5d agoWiz ResearchWiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz BlogWiz Research reports that 82% of organizations grant third-party cloud vendors wide read access and 76% grant roles enabling full account takeover, based on an analysis of 1,300+ AWS accounts and 40+ vendors.
    10 articles
    1. 5d agoWiz ResearchWiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz Blog
    2. 5d agoWiz ResearchChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz Blog
    3. 5d agoWiz ResearchThe cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors | Wiz Blog
    4. 5d agoWiz ResearchHow we broke the cloud with two lines of code: the full story of ChaosDB | Wiz Blog
    5. 5d agoWiz ResearchBingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz Blog
    6. 5d agoWiz ResearchBingBang: How a simple developer mistake could have led to Bing.com takeover | Wiz Blog
    7. 5d agoWiz ResearchAttachMe: critical OCI vulnerability allows unauthorized access to customer cloud storage volumes | Wiz Blog
    8. 5d agoWiz ResearchChaosDB: How we hacked thousands of Azure customers’ databases | Wiz Blog
    9. 5d agoWiz Research“Secret” Agent Exposes Azure Customers To Unauthorized Code Execution | Wiz Blog
    10. 4d agoWiz ResearchPickupBreaking Down PHP2Shell with Sagi Tzadik & Thai Duong | Wiz
    Cyber161 linked

Coverage

1 outlets · first seen 5d ago

Connected

14 links

About

  • Microsoft
  • Wiz

Cookies

Analytics cookies help us see how the site is used. They only run if you accept. Privacy Policy

Wiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz Blog — The Wave