CTO @wiz_io a leader in cloud security, proudly working with Wiz Research team on cloud vulnerabilities #ChaosDB#OMIGOD. leading the effort for #CloudCVE.
This is even more severe. The RCE is the simplest RCE you can ever imagine. Simply remove the auth header and you are root. remotely. on all machines. Is this really 2021?
One of the most severe vulnerabilities in recent years discovered by @wiz_io research. The potential impact is more than 60% of the internet.
Get ready to patch now.
A single key to take over the cloud #CosmosEscape is a vulnerability every cloud security team should learn from. Cross tenant vulnerability potentially leading to a full takeover of multiple services.
Amazing work, as always, by @wiz_io research!
Great collab with @msftsecurity who fixed this at the core, architecture redesign to eliminate the key.
We (+@liormama) gained full access to EVERY database on Azure's flagship DB service 🤯
And all we needed was a single key 🔑
This is the story of #CosmosEscape 🧵👇
@wiz_io research has done it again👏
AI assisted vulnerabilities are here!!
A one-year research took days using latest AI models. Real world example for the impact of AI on closed source binaries.
Amazing work by @github remediating the issue in minutes from our initial mail.