Microsoft warns thousands of cloud customers that a now-fixed Azure Cosmos vulnerability might have exposed databases, but it saw no evidence it was exploited
Microsoft (MSFT.O) on Thursday warned thousands of its cloud computing customers, including some of the world's largest companies …
Reuters Joseph Menn
Related Coverage
- ChaosDB: How we hacked thousands of Azure customers' databases Wiz Blog
- ChaosDB: Unauthorized Privileged Access to Microsoft Azure Cosmos DB Wiz
- Microsoft fixes cloud platform vulnerability after warning Associated Press
- View article Wired
- Microsoft Azure Cosmos DB Database Security Flaw Exposed Client Data For Years HotHardware.com News · Paul Lilly
- View article fossbytes.com
- Microsoft warns Azure customers of critical Cosmos DB vulnerability BleepingComputer · Sergiu Gatlan
- “Worst cloud vulnerability you can imagine” discovered in Microsoft Azure Ars Technica · Jim Salter
- Microsoft Teams introduces new free reading tool for students. How it works Livemint
- Microsoft warns customers that Azure Cosmos DB vulnerability exposed their databases for years TechSpot · Adrian Potoroaca
- Microsoft Azure Cloud Vulnerability Exposed Thousands of Databases Dark Reading · Robert Lemos
- Whitehat hackers accessed primary keys of Azure's Cosmos DB customers HackRead · Saad Rajpoot
- ChaosDB Vulnerability Exposes Thousands of Microsoft Azure Databases PCMag · Nathaniel Mott
- Microsoft forced to notify 3000 companies using Azure that their data could be read by anyone for over 2 years MSPoweruser · Surur
- ChaosDB, a Critical Cosmos DB flaw affected thousands of Microsoft Azure Customers Security Affairs · Pierluigi Paganini
- ‘Unprecedented’ Microsoft Azure database vulnerability impacts thousands of customers, researchers warn GeekWire · Todd Bishop
- Critical Azure Cosmos DB Bug Allows Full Cloud Account Takeover Threatpost · Tara Seals
- Microsoft Azure flaw left thousands of cloud customers' data vulnerable Engadget · Mariella Moon
- Azure Cosmos DB alert: This critical vulnerability puts users at risk ZDNet · Steven J. Vaughan-Nichols
- Microsoft Cloud Databases Exposed infosecurity-magazine.com · Sarah Coble
- “Intruders” in the cloud: Microsoft warns “thousands” of Azure customers about potential exposure TechRepublic · R. Dallon Adams
- Huge Microsoft security vulnerability left thousands of companies' data at risk SlashGear · Chris Davies
- ChaosDB: Major security flaw in Azure Cosmos DB exposed customer data for years Neowin · Usama Jawad
- View article WinBuzzer
Discussion
-
@christinayiotis
Christina Ayiotis
on x
“The disclosure comes after months of bad security news for Microsoft. The company was breached by the same suspected Russian government hackers that infiltrated SolarWinds, who stole @Microsoft source code here.” https://www.reuters.com/...
-
@karolcummins
Karol Cummins
on x
Microsoft warned clients that intruders could have the ability to read, change or even delete their main databases, according to a copy of the email and a cyber security researcher. The vulnerability is in Microsoft Azure's flagship Cosmos database. https://www.reuters.com/...
-
@x0rz
@x0rz
on x
Cloud security is an illusion. Transferring the risks doesn't make them disappear. At best you'll lose visibility and sleep better (but really, you shouldn't). https://twitter.com/...
-
@davegershgorn
Dave Gershgorn
on x
“This is the worst cloud vulnerability you can imagine. It is a long-lasting secret,” Luttwak told Reuters. “This is the central database of Azure, and we were able to get access to any customer database that we wanted.” https://twitter.com/...
-
@pauldokas
Paul Dokas
on x
“The vulnerability is in Microsoft Azure's flagship Cosmos DB database. A research team at security company Wiz discovered it was able to access keys that control access to databases held by thousands of companies. Oh my. 😬 https://twitter.com/...
-
@rmogull
Rich Mogull
on x
Man. With everything going on lately it's almost like Microsoft could use some sort of security initiative for Azure. Like, something trustworthy. In unrelated news, former employees disclosing vulns in their area of expertise probably have good lawyers? https://www.reuters.com/.…
-
@scuba2024
Scuba Mike
on x
#BREAKING. Exclusive: Microsoft warns thousands of its cloud computing customers, including some of the world's largest companies, of exposed databases https://www.reuters.com/...
-
@livemint
Mint
on x
Problems with Azure are especially troubling, because Microsoft and outside security experts have been pushing companies to abandon most of their own infrastructure and rely on the cloud for more security https://www.livemint.com/...
-
@kmcquade3
@kmcquade3
on x
🔥🔥 Crazy exploit on Azure Cosmos DB. “In short, the [Jupyter] notebook container allowed for a privilege escalation into other customer notebooks... As a result, an attacker could gain access to customers' Cosmos DB primary keys... and the notebook storage access token.” https://…
-
@malwarejake
Jake Williams
on x
I mean, don't worry the cloud platform is 100% secure though (except when it isn't). https://www.google.com/... https://twitter.com/...
-
@amirmizroch
Amir Mizroch
on x
ALT hed: Israeli startup that spun out of Microsoft cloud security finds major flaw in Microsoft cloud security. https://www.reuters.com/...
-
@techtrainertim
Tim Warner
on x
If your business uses Cosmos DB, then you should read this article. | Microsoft Azure cloud vulnerability is the ‘worst you can imagine’ | https://www.theverge.com/... | @TheVerge
-
@quinnypig
Corey Quinn
on x
This bug is pretty damned close to Cloud Armageddon. https://twitter.com/...
-
@tomwarren
Tom Warren
on x
Microsoft isn't having a great summer of security. A flaw in Microsoft's Azure Cosmos DB database product left more than 3,300 Azure customers open to complete unrestricted access by attackers 😬 https://www.theverge.com/... https://twitter.com/...