CISA urges all Microsoft Cosmos DB users to update passwords now

The Cybersecurity and Infrastructure Security Agency (CISA) is urging all users of Microsoft’s Azure Cosmos DB database service to regenerate their certificate keys, following the discovery of a serious security flaw that could hand over control of the databases to unauthorized individuals.

© Provided by TechRadar Image of padlock against circuit board/cybersecurity background

The Cosmos DB flaw was discovered by cloud infrastructure security company Wiz, who were able to exploit a vulnerability in the service’s Jupyter Notebook implementation, which gave attackers access to the database’ primary keys and other highly sensitive secrets such as its blob storage access token.

Upon being notified, Microsoft quickly disabled Jupyter, and emailed a section of its users to rotate their keys. The CISA however suggests all Cosmos DB to follow this precautionary step.

TechRadar needs you!

We’re looking at how our readers use VPNs with streaming sites like Netflix so we can improve our content and offer better advice. This survey won’t take more than 60 seconds of your time, and we’d hugely appreciate if you’d share your experiences with us.

>> Click here to start the survey in a new window <<

“Although the misconfiguration appears to have been fixed within the Azure cloud, CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate keys and to review Microsoft’s guidance on how to Secure access to data in Azure Cosmos DB,” notes CISA in its advisory.

Don’t take it lightly

According to the Wiz researchers, the flaw would equip threat actors with everything they need to access and exercise full read/write/delete control over the database from across the internet.

In a blog post, Microsoft said that its investigation indicated that “no customer data was accessed because of this vulnerability,” adding that they’ve notified the customers whose keys may have been affected by the researchers.

However, the Wiz researchers sided with CISA’s directive that extended the advisory to all Cosmos DB users, since it’s difficult to gauge the true impact of the vulnerability.

“In my estimation, it’s really hard for them, if not impossible, to completely rule out that someone used this before,” Wiz Chief Technology Officer Ami Luttwak told Reuters.  

Via Reuters

Internet Explorer Channel Network
News Related

OTHER NEWS

ACT reports 20 new virus cases

The ACT has reported another 20 locally acquired COVID-19 cases while handing residents a green light to visit 26 extra NSW postcodes as part of relaxing quarantine requirements. © Mick ... Read more »

‘The most silent of all silences': Port Arthur massacre film opens in Tasmania

It began with faint ripples of anxious laughter and ended with a stillness so unnervingly intense that one person remarked in the foyer of Hobart’s State Cinema afterwards, “that was ... Read more »

AFP seizes 450 kilograms of heroin in largest ever haul

A shipping container of ceramic tiles has been used to conceal 450 kilograms of heroin bound for Australian streets. Australian authorities detected what is the largest heroin shipment ever, inside ... Read more »

Everything we know about Google's Pixel 6 and Pixel 6 Pro so far

Google‘s Pixel 6 and Pixel 6 Pro will officially be launched on October 19, and in typical fashion, we know a ton of details about the phones well before their ... Read more »

Australians vote for their favourite TV show of all time

© Provided by Daily Mail MailOnline logo Australians have voted on the best television shows ever made with some obvious choices at the top and also a few surprises that ... Read more »

Sons of Anarchy star Katey Sagal hospitalised after being hit by a car

Katey Sagal has ended up in hospital this weekend after being hit by a car while crossing the road, TMZ reports. It is alleged that a person driving a Tesla ... Read more »

Sean Penn's wife of 15 months Leila George, 29, files for divorce

© Provided by Daily Mail MailOnline logo Sean Penn’s wife of just over a year, Leila George has filed for divorce, but no details of what led to the split ... Read more »

COVID-positive 15yo among seven Vic deaths

A COVID-positive teenage girl with other health conditions has become the youngest Victorian to die during the current outbreak. © James Ross/AAP PHOTOS The latest deaths in Victoria’s current COVID-19 ... Read more »

Apple reportedly just fired another employee who brought attention to issues at the company

Apple CEO Tim Cook. Yves Herman/Reuters Apple just fired a staffer who helped organize employees at the company, The Verge reported. Janneke Parrish was an Apple Maps program manager who ... Read more »

Tragedy as award-winning racehorse is killed after trackwork injury

© Provided by Daily Mail MailOnline logo Cox Plate winner Sir Dragonet has been euthanised following a track work injury just a week before the champion horse was set to ... Read more »

The cheapest city in Australia to rent in has been revealed

© Provided by Daily Mail MailOnline logo Melbourne has become the cheapest capital city in Australia to rent a home for the first time ever – and it’s all thanks ... Read more »

No new cases in Tasmania amid lockdown

© Ethan James/AAP PHOTOS Tasmanian restrictions, covering 12 government areas including Hobart, came into effect on Friday. No new coronavirus cases have been recorded in Tasmania, as the state’s south ... Read more »

NSW records 319 new COVID cases as state nears 80 per cent double-dose vaccination

NSW has recorded 319 new cases of COVID-19 as the state inches closer to 80 per cent double-dose vaccination, a milestone expected to be reached some time this weekend. Fully-vaccinated ... Read more »

State-sponsored attackers infiltrate Play Store with fake VPN app

Spyware can come in many forms and in May of last year, Google’s Threat Analysis Group discovered that state-sponsored hackers had disguised their malicious software as a VPN app and ... Read more »

SA Police investigate suspicious death at Gawler South after woman's body found inside home

© Provided by ABC NEWS Crime scene investigators returned to the house this morning.  (ABC News: Claire Campbell) South Australia Police are treating the death of a woman north of ... Read more »

China lags in important electric car technology despite rare earths advantage, says permanent magnets scientist

Chinese electric carmakers are still lagging behind their foreign rivals in permanent magnet (PM) motor innovation despite the fact that China is the world’s dominant supplier of the rare earth ... Read more »

North Queensland's property market booming as interstate buyers take advantage of lower prices

© Provided by ABC Business Real estate agent Chelsea Stevens says she’s having 20 to 30 groups through an open home. (ABC North Queensland: Zilla Gordon) Chelsea Stevens has 100 ... Read more »

New Antarctic icebreaker RSV Nuyina docks in locked-down Hobart

© Provided by ABC NEWS The Nuyina was escorted up the River Derwent by tugs but minus a flotilla of well-wishers, which had to be cancelled because of a lockdown. (Supplied: Caroline ... Read more »

Ernie Hudson Reacts to 'Ghostbusters: Afterlife' & Talks Season 3 of 'The Family Business' (Exclusive)

© ET Ernie Hudson is just as excited about Ghostbusters: Afterlife as the fans. In a chat with ET’s Matt Cohen, the 75-year-old revealed that Jason and Ivan Reitman invited him to ... Read more »

Pay-by-the-mile road pricing plans are DROPPED

© Provided by Daily Mail MailOnline logo Plans to introduce road pricing have been shelved amid fears the idea could kill off demand for electric vehicles. Boris Johnson will publish the ... Read more »

Get the tissues, Adele brings the feels in first new music in six years

The last couple of years have been tumultuous and life-changing, with the ups and downs of everyday life continuing against the background of the pandemic. The rich and famous aren’t ... Read more »

What the COVID-19 vaccine booster data still can't tell us

This past week, a panel of independent FDA advisors has voted to recommend booster shots of both the Moderna and Johnson & Johnson COVID vaccines.  © Knartz/Deposit Photos An FDA ... Read more »

‘Pent-up demand': Sydney celebrates Friday night drinks after lengthy lockdown

Stormy weather and social distancing didn’t stop Sydneysiders from celebrating Friday night drinks for the first time since June following the easing of lockdown restrictions. Eyebrows plucked, bodies freshly tanned, ... Read more »

A Mysterious 'Ghost Particle' Probably Didn't Come From a Black Hole's Meal After All

© DESY, Science Communication Lab Animation of AT2019dsg. A high-energy neutrino traced back to a violent encounter between a black hole and a star needs a different origin story, new ... Read more »

[INTERVIEW] ASM provides diversity in critical metals supply chain

ASM’s rare earth mine site in Dubbo, New South Wales, Australia / Courtesy of ASM Strategic partnership with ASM creates stable, direct supply chain for rare earth metals By Anna ... Read more »

Sunrise headed for cast shakeup as Today gains in the ratings

© Provided by Daily Mail MailOnline logo Sunrise will be shuffling its cast lineup as rival morning show Today gains steady traction in the TV ratings and closes the gap. ... Read more »

Anti-vaxxer claims doctors banished unvaccinated from surgeries

© Provided by Daily Mail MailOnline logo A furious patient claims he was forced to wait outside a medical centre in a makeshift plastic booth after the practice banned him ... Read more »

Aviation, tourism industries rushing to prepare for 'living with COVID-19'

Traveler wait to check in at Terminal 2 of Incheon International Airport, Oct. 4. Yonhap By Jun Ji-hyeExpectations toward demand recovery for overseas travel are rising in the aviation and ... Read more »

Microsoft is toying with a new way to roll out Windows 11 updates

Following the launch of Windows 11, Microsoft has revealed that it is currently in the process of testing out a new way to deliver updates to the latest version of ... Read more »

Midland's history stretches back thousands of years before the railways put the area on the map

© Provided by ABC NEWS Midland Town Hall opened in 1907, the dome was added after World War I as a memorial to the fallen. (ABC Radio Perth: Emma Wynne) ... Read more »

Darren Criss and Wife Mia Swier Announce They're Expecting Their First Child

© P. Lehman/Barcroft Media via Getty Images Darren Criss and Mia Swier are having a baby! The Hollywood star and his wife announced that they are expecting their first child ... Read more »

After seeing new leaked photos of the Pixel 6, I think I finally get the phone's unusual design

We’re just a few days away from Google’s October 19th launch event for the Pixel 6 and Pixel 6 Pro, but if you want an early look at what to ... Read more »

UK announces extra £29m of humanitarian aid for Ethiopia

The UK has announced an extra £29m of humanitarian aid to people affected by the deepening conflict in northern Ethiopia, as the foreign secretary, Liz Truss, reviews what kind of ... Read more »

Acer Predator Triton 500 SE

The Acer Predator Triton 500 SE is Acer’s flagship gaming laptop, featuring intel Core i7 processor, an Nvidia GeForce RTX 3060 GPU, 16 GB RAM and a 512 GB SSD. ... Read more »

Claudio Ranieri wants to get best out of Ismaila Sarr versus Liverpool

© Provided by Daily Mail MailOnline logo Claudio Ranieri admits he must devise a tactical plan to maximise the talent of Ismaila Sarr as he prepares to face Liverpool in ... Read more »

Victoria's covid cases drop below 2,000 cases

© Provided by Daily Mail MailOnline logo Victoria’s Covid cases have dropped below 2,000 cases after record high numbers.  There were 1,993 cases and seven deaths announced on Saturday. Melburnians ... Read more »

A year later, Apple's MagSafe continues to underwhelm

One year ago yesterday, I wrote how MagSafe could be the biggest reason to buy an iPhone 12. I believed it, too. It looked like Apple had cracked the code ... Read more »

ACT allows travel to more NSW regions

Residents of the ACT have been given the green light to visit a further 26 NSW postcode areas after a relaxing of coronavirus quarantine requirements. © Mick Tsikas/AAP PHOTOS The ... Read more »

Ben Affleck shoots intense scene on the Austin set of Hypnotic

© Provided by Daily Mail MailOnline logo He has been in New York with his longtime friend Matt Damon in recent days to promote his new historical drama The Last ... Read more »

How To Watch NASA's Lucy Launch—A Cosmic Hunt for Asteroids

At 5:34 a.m. E.T. on Saturday, NASA’s Lucy mission is scheduled to launch from the Florida Space Coast region. The mission is designed to study Jupiter’s Trojan asteroids—named for famous ... Read more »