Recent Stories
Keeping the Human in Medicine: Two AI CoLab Researchers on What Machines Can’t ReplaceSomeone Is Hacking the Freezers. Pay Attention.Thinking of Running in 2028? Start HereWhat the Lame Duck Session Has to Do With the Ultimate 21st-Century Power Tool: RobotsBlack October Wasn't an Attack Wave. It Was a Warning.Extreme Ownership Means Ultimate Achievement – NASA Culture Shift

The Wave

← Back to the board
News

The cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors | Wiz Blog

Why it’s here: Wiz Research's disclosure of cross-tenant isolation flaws in major cloud vendors' managed PostgreSQL services is a cybersecurity threat/vulnerability item from a specialist source that bears on cloud-provider security posture and policy relevance, even without an explicit federal hook.

Trace across the board

Item

  1. 5d agoWiz ResearchThe cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors | Wiz BlogWiz Research reports that 82% of organizations grant third-party cloud vendors wide read access and 76% grant roles enabling full account takeover, based on an analysis of 1,300+ AWS accounts and 40+ vendors.
    10 articles
    1. 5d agoWiz ResearchWiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz Blog
    2. 5d agoWiz ResearchChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz Blog
    3. 5d agoWiz ResearchThe cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors | Wiz Blog
    4. 5d agoWiz ResearchHow we broke the cloud with two lines of code: the full story of ChaosDB | Wiz Blog
    5. 5d agoWiz ResearchBingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz Blog
    6. 5d agoWiz ResearchBingBang: How a simple developer mistake could have led to Bing.com takeover | Wiz Blog
    7. 5d agoWiz ResearchAttachMe: critical OCI vulnerability allows unauthorized access to customer cloud storage volumes | Wiz Blog
    8. 5d agoWiz ResearchChaosDB: How we hacked thousands of Azure customers’ databases | Wiz Blog
    9. 5d agoWiz Research“Secret” Agent Exposes Azure Customers To Unauthorized Code Execution | Wiz Blog
    10. 4d agoWiz ResearchPickupBreaking Down PHP2Shell with Sagi Tzadik & Thai Duong | Wiz
    Cyber161 linked

Coverage

1 outlets · first seen 5d ago

Connected

6 links

About

  • Wiz
  • Google Cloud Platform

Cookies

Analytics cookies help us see how the site is used. They only run if you accept. Privacy Policy

The cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors | Wiz Blog — The Wave