Volish customers have shedloads of exposed data

Stefan Mileschin · 30th August 2021, 12:44

Vulnerability in Cosmos database

Software king of the world Microsoft warned thousands of its cloud computing customers, including some of the world's largest companies, that intruders could have the ability to read, change or even delete their main databases.

The vulnerability is in Microsoft Azure's flagship Cosmos DB database. A research team at security company Wiz discovered it was able to access keys that control access to databases held by thousands of companies.

The problem for Vole is that it cannot change the keys by itself, and it has emailed the customers Thursday telling them to create new ones.

"We fixed this issue immediately to keep our customers safe and protected. We thank the security researchers for working under coordinated vulnerability disclosure", Microsoft told Reuters.

Microsoft's email to customers said there was no evidence the flaw had been exploited. "We have no indication that external entities outside the researcher (Wiz) had access to the primary read-write key", the email said.

https://fudzilla.com/news/memory-and...f-exposed-data

30th August 2021, 12:44	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 148,812	Volish customers have shedloads of exposed data Vulnerability in Cosmos database Software king of the world Microsoft warned thousands of its cloud computing customers, including some of the world's largest companies, that intruders could have the ability to read, change or even delete their main databases. The vulnerability is in Microsoft Azure's flagship Cosmos DB database. A research team at security company Wiz discovered it was able to access keys that control access to databases held by thousands of companies. The problem for Vole is that it cannot change the keys by itself, and it has emailed the customers Thursday telling them to create new ones. "We fixed this issue immediately to keep our customers safe and protected. We thank the security researchers for working under coordinated vulnerability disclosure", Microsoft told Reuters. Microsoft's email to customers said there was no evidence the flaw had been exploited. "We have no indication that external entities outside the researcher (Wiz) had access to the primary read-write key", the email said. https://fudzilla.com/news/memory-and...f-exposed-data

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Analytics firm exposed data for 120 million households	Stefan Mileschin	WebNews	0	24th February 2020 07:17
AMC accidentally exposed data on 1.6 million subscribers	Stefan Mileschin	WebNews	0	5th May 2019 04:12
Iranians nick shedloads of Citrix data	Stefan Mileschin	WebNews	0	12th March 2019 12:56
Google exposed data for hundreds of thousands of users	Stefan Mileschin	WebNews	0	9th October 2018 07:27
Best Buy may also have had customer data exposed	Stefan Mileschin	WebNews	0	8th April 2018 04:38
Sears and Delta customers may have had payment data exposed	Stefan Mileschin	WebNews	0	7th April 2018 06:14
Orbitz data breach exposed 880,000 payment cards	Stefan Mileschin	WebNews	0	23rd March 2018 11:58
Equifax breach may have exposed more data than first thought	Stefan Mileschin	WebNews	0	15th February 2018 05:23
Data leak exposed millions of Time Warner Cable customers	Stefan Mileschin	WebNews	0	3rd September 2017 16:24
Apple's two-factor authentication still leaves some of your data exposed	Stefan Mileschin	WebNews	0	14th January 2015 07:44