wiz.io/blog· Aug 26, 2021· by Nir Ohfeld

ChaosDB: How we hacked thousands of Azure customers’ databases

Open Original Article ↗
As part of building a market-leading CNAPP, Wiz Research is constantly looking for new attack surfaces in the cloud. Two weeks ago we discovered an unprecedented breach that affects Azure’s flagship database service, Cosmos DB.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.