Microsoft Azure security flaw left thousands of cloud databases vulnerable to hackers

Microsoft has revealed that thousands of Azure Cosmos DB database users may need to update their security protections after a serious flaw was discovered.

© Provided by TechRadar representational image of a cloud firewall

Cosmos DB is Microsoft’s database service that runs atop its Azure cloud computing platform, and is used by various Fortune 500 companies all around the world.

Cybersecurity researchers from cloud infrastructure security company Wiz discovered a series of flaws in one of the features of the database service, which could be exploited by threat actors to gain complete control over a database, meaning they could read or even delete data. 

TechRadar needs you!

We’re looking at how our readers use VPNs with streaming sites like Netflix so we can improve our content and offer better advice. This survey won’t take more than 60 seconds of your time, and we’d hugely appreciate if you’d share your experiences with us.

>> Click here to start the survey in a new window <<

“Every CISO’s nightmare is someone getting their access keys and exfiltrating gigabytes of data in one fell swoop. So you can imagine our surprise when we were able to gain complete unrestricted access to the accounts and databases of several thousand Microsoft Azure customers, including many Fortune 500 companies,” write Wiz’s Nir Ohfeld and Sagi Tzadik in a joint blog post.

Keyless entry

The security researchers note that exploiting the vulnerability, which they’ve named ChaosDB, was “trivial.”

The vulnerability exists in the Jupyter Notebook feature that helps users visualize their data. It was introduced in 2019 and was automatically enabled for all Cosmos DB databases in February 2021.

Without giving out too many details, the researchers note that Jupyter’s implementation gave attackers access to the database’ primary keys and other highly sensitive secrets such as its blob storage access token.

Exploiting these details keys, the researchers were able to access and exercise full read/write/delete control over the database from across the internet.

On being notified by the researchers, Microsoft quickly disabled the vulnerable notebook feature to prevent leaking secrets. The company is also asking a section of its users to rotate their keys to ensure that any keys that have already been exfiltrated by unauthorized users are rendered useless.

According to Reuters, Microsoft’s email highlighted the fact that the company had found no evidence to suggest that the flaw had been exploited. 

Via Reuters

Internet Explorer Channel Network
News Related

OTHER NEWS

Queensland records no new locally acquired cases of COVID-19 as Bunnings vaccination clinics open

Queensland has recorded no new locally acquired cases of COVID-19, as the state turns to a novel way to increase vaccination rates. Treasurer Cameron Dick held this morning’s press conference ... Read more »

Southern Tasmania declared COVID-19 hotspot as Qld records no new local cases

Queenslanders returning from southern Tasmania have hours to make it home before they will be forced into hotel quarantine because of an ongoing COVID-19 threat in Hobart. Queensland meanwhile recorded ... Read more »

Punters flock to Royal Randwick for The Everest carnival

© Provided by Daily Mail MailOnline logo Sydneysiders are well and truly celebrating the end of lockdown as they flock to the Royal Randwick Racecourse for The Everest – the ... Read more »

WBBL announces four matches to go ahead in Hobart behind closed doors this weekend, amid COVID lockdown

Cricket Australia has confirmed all four Women’s Big Bash League matches will go ahead in Hobart this weekend but behind closed doors, following the Tasmanian capital’s snap three-day lockdown. The ... Read more »

Girl, 15, dies after contracting Covid

© Provided by Daily Mail MailOnline logo A COVID-positive teenage girl with other health conditions has become the youngest Victorian to die during the current outbreak. Victoria’s COVID-19 commander Jeroen ... Read more »

IPL 2022: 3 Teams Who Can Target Hardik Pandya In Mega Auction

Hardik Pandya-Mumbai Indians Predicted Playing XI IPL 2022 will be a 10-team affair with two new teams coming into the fold. Ahmedabad and Lucknow are the cities likely to be ... Read more »

The Australian sprinter whose career was killed by the 'Black Power' podium protest

US athletes Tommie Smith, centre, and John Carlos, right, raise their fists in protest on the podium in Mexivo City in 1968, behind Australian sprinter Peter Norman, left. (Getty) This ... Read more »

CATL's EV battery breakthrough holds promise as cost-effective, game-changing alternative the industry's waiting for

The first of a three-part series on battery packs looks at the world’s largest producer CATL and how it occupies the apex of a technological revolution to assemble cheaper and ... Read more »

A 'Champagne Dame' and a $43m mansion: What we know about the new Real Housewives of Melbourne cast.

The Real Housewives of Melbourne is back gracing our TV screens, with four new ladies joining the cast to shake things up. © Getty Images A ‘Champagne Dame’ and a $43m ... Read more »

ACT allows travel to additional NSW areas

Fully vaccinated ACT residents can visit additional areas of NSW after coronavirus quarantine requirements were relaxed. © Mick Tsikas/AAP PHOTOS The ACT is relaxing rules on visiting parts of NSW, ... Read more »

Vic lockdown rules ludicrous: Frydenberg

Federal treasurer Josh Frydenberg has described Victoria’s current COVID-19 lockdown rules allowing for entry from NSW but enforcing confinement in Melbourne as “ludicrous and unacceptable”. © James Ross/AAP PHOTOS Treasurer ... Read more »

Victoria records 1993 new local COVID-19 cases, seven deaths

Victoria records 1993 new local cases of COVID-19 Victoria has recorded 1993 new local COVID-19 cases in the last 24 hours and seven deaths. Among the deaths is a 50-year-old ... Read more »

¡Increíble! Utilizan los catalizadores de los autos para hacer droga

© Proporcionado por Autocosmos (Colombia) ¡Increíble! Utilizan los catalizadores de los autos para hacer droga El uso de drogas por parte del ser humano data de miles de años, incluso ... Read more »

Hannah Gadsby slams Netflix executive Ted Sarandos for dragging her name into defence of Dave Chappelle

© Provided by ABC NEWS Hannah Gadsby did not mince her words in her Instagram post. (Supplied) Australian comedian Hannah Gadsby has launched a scathing attack on a Netflix executive ... Read more »

'Throw the book' at Tas quarantine escapee

© Ethan James/AAP PHOTOS Tasmanian restrictions, covering 12 government areas including Hobart, came into effect on Friday. Tasmania’s premier wants extra penalties dished out to a coronavirus-infected NSW man whose ... Read more »

NSW gets spring snow as severe storm warning is issued

NSW records 319 new local cases of COVID-19 New South Wales ski fields have received a late dusting of spring snow after days of wild weather battered the state. Perisher ... Read more »

Trump-backed challengers to Republican lawmakers lag in fundraising

By Jason Lange © Reuters/RACHEL MUMMEY FILE PHOTO: Former U.S. President Trump holds rally in Iowa WASHINGTON (Reuters) – Four candidates backed by Donald Trump to challenge Republican lawmakers who ... Read more »

Stuart Ayres defends NSW's scrapping of quarantine from November 1

UK politician dies after being stabbed at meeting New South Wales Deputy Liberal leader Stuart Ayres defended the state government’s plan to scrap quarantine requirements for fully vaccinated travellers from November 1. Mr Ayres said the plan ... Read more »

Border rule shake-up exposes contradictions as Victoria records 1993 new cases, seven deaths

Victoria has recorded 1993 new local cases of coronavirus and seven deaths as changes to border rules mean vaccinated NSW travellers will be able to visit Victoria without quarantining before ... Read more »

NT Police charge 32-year-old man over a fatal hit and run in Darwin's northern suburbs

© Provided by ABC NEWS NT Police released CCTV footage of the vehicle, captured on Gsell Street prior to the crash. (Supplied: NT Police) Northern Territory Police have charged a man ... Read more »

ACT reports 20 new virus cases

The ACT has reported another 20 locally acquired COVID-19 cases while handing residents a green light to visit 26 extra NSW postcodes as part of relaxing quarantine requirements. © Mick ... Read more »

‘The most silent of all silences': Port Arthur massacre film opens in Tasmania

It began with faint ripples of anxious laughter and ended with a stillness so unnervingly intense that one person remarked in the foyer of Hobart’s State Cinema afterwards, “that was ... Read more »

AFP seizes 450 kilograms of heroin in largest ever haul

A shipping container of ceramic tiles has been used to conceal 450 kilograms of heroin bound for Australian streets. Australian authorities detected what is the largest heroin shipment ever, inside ... Read more »

Everything we know about Google's Pixel 6 and Pixel 6 Pro so far

Google‘s Pixel 6 and Pixel 6 Pro will officially be launched on October 19, and in typical fashion, we know a ton of details about the phones well before their ... Read more »

Australians vote for their favourite TV show of all time

© Provided by Daily Mail MailOnline logo Australians have voted on the best television shows ever made with some obvious choices at the top and also a few surprises that ... Read more »

Sons of Anarchy star Katey Sagal hospitalised after being hit by a car

Katey Sagal has ended up in hospital this weekend after being hit by a car while crossing the road, TMZ reports. It is alleged that a person driving a Tesla ... Read more »

Sean Penn's wife of 15 months Leila George, 29, files for divorce

© Provided by Daily Mail MailOnline logo Sean Penn’s wife of just over a year, Leila George has filed for divorce, but no details of what led to the split ... Read more »

COVID-positive 15yo among seven Vic deaths

A COVID-positive teenage girl with other health conditions has become the youngest Victorian to die during the current outbreak. © James Ross/AAP PHOTOS The latest deaths in Victoria’s current COVID-19 ... Read more »

Apple reportedly just fired another employee who brought attention to issues at the company

Apple CEO Tim Cook. Yves Herman/Reuters Apple just fired a staffer who helped organize employees at the company, The Verge reported. Janneke Parrish was an Apple Maps program manager who ... Read more »

Tragedy as award-winning racehorse is killed after trackwork injury

© Provided by Daily Mail MailOnline logo Cox Plate winner Sir Dragonet has been euthanised following a track work injury just a week before the champion horse was set to ... Read more »

The cheapest city in Australia to rent in has been revealed

© Provided by Daily Mail MailOnline logo Melbourne has become the cheapest capital city in Australia to rent a home for the first time ever – and it’s all thanks ... Read more »

No new cases in Tasmania amid lockdown

© Ethan James/AAP PHOTOS Tasmanian restrictions, covering 12 government areas including Hobart, came into effect on Friday. No new coronavirus cases have been recorded in Tasmania, as the state’s south ... Read more »

NSW records 319 new COVID cases as state nears 80 per cent double-dose vaccination

NSW has recorded 319 new cases of COVID-19 as the state inches closer to 80 per cent double-dose vaccination, a milestone expected to be reached some time this weekend. Fully-vaccinated ... Read more »

State-sponsored attackers infiltrate Play Store with fake VPN app

Spyware can come in many forms and in May of last year, Google’s Threat Analysis Group discovered that state-sponsored hackers had disguised their malicious software as a VPN app and ... Read more »

SA Police investigate suspicious death at Gawler South after woman's body found inside home

© Provided by ABC NEWS Crime scene investigators returned to the house this morning.  (ABC News: Claire Campbell) South Australia Police are treating the death of a woman north of ... Read more »

China lags in important electric car technology despite rare earths advantage, says permanent magnets scientist

Chinese electric carmakers are still lagging behind their foreign rivals in permanent magnet (PM) motor innovation despite the fact that China is the world’s dominant supplier of the rare earth ... Read more »

North Queensland's property market booming as interstate buyers take advantage of lower prices

© Provided by ABC Business Real estate agent Chelsea Stevens says she’s having 20 to 30 groups through an open home. (ABC North Queensland: Zilla Gordon) Chelsea Stevens has 100 ... Read more »

New Antarctic icebreaker RSV Nuyina docks in locked-down Hobart

© Provided by ABC NEWS The Nuyina was escorted up the River Derwent by tugs but minus a flotilla of well-wishers, which had to be cancelled because of a lockdown. (Supplied: Caroline ... Read more »

Ernie Hudson Reacts to 'Ghostbusters: Afterlife' & Talks Season 3 of 'The Family Business' (Exclusive)

© ET Ernie Hudson is just as excited about Ghostbusters: Afterlife as the fans. In a chat with ET’s Matt Cohen, the 75-year-old revealed that Jason and Ivan Reitman invited him to ... Read more »

Pay-by-the-mile road pricing plans are DROPPED

© Provided by Daily Mail MailOnline logo Plans to introduce road pricing have been shelved amid fears the idea could kill off demand for electric vehicles. Boris Johnson will publish the ... Read more »