Wiz Research has disclosed CosmosEscape, a vulnerability chain in Azure Cosmos DB that yielded read and write access to every database on the service. Microsoft has completed remediation, and no ...

A critical Gremlin API vulnerability exposed a path to any Cosmos DB instance, including Microsoft’s own services, before the company redesigned the platform. A critical vulnerability in Microsoft ...

Microsoft has had a narrow escape from total embarrassment: A security company uncovered a critical vulnerability that could have compromised all Azure Cosmos DB databases — both those of customers ...

Named CosmosEscape, the vulnerability exposed the primary key for Cosmos DB accounts, granting full read and write access. A critical vulnerability in the Azure Cosmos DB database service could have ...

A now-patched critical flaw in Azure Cosmos DB could have been exploited to compromise every database in the service, including Microsoft’s own internal databases for Entra ID, Teams, and Copilot, ...

Wiz Research disclosed Wednesday that a chain of vulnerabilities in Azure Cosmos DB's Gremlin query engine — which the firm named CosmosEscape — allowed any attacker with a standard Cosmos DB account ...

Wiz Research disclosed a critical vulnerability, dubbed CosmosEscape, in Azure Cosmos DB, Microsoft’s flagship NoSQL database service. The flaw resided in the service’s Gremlin API and could have ...

Wiz researchers found a single credential that could unlock every database running on Microsoft’s Azure Cosmos DB. They named it the Cosmos Master Key. And the vulnerability hunter that helped find it ...

A critical vulnerability, dubbed CosmosEscape, in Microsoft Azure Cosmos DB could have let attackers seize control of virtually every database hosted on the service, including Microsoft’s own internal ...

A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the service's Gremlin query sandbox and obtain full read and write access to databases across customer tenants, ...

WASHINGTON, July 30 (Reuters) - Alphabet-owned (GOOGL.O), opens new tab cybersecurity company Wiz said on Thursday it had found a sweeping flaw that could have compromised Microsoft (MSFT.O), opens ...