Discovering ChaosDB, a critical vulnerability in the CosmosDB. [Research Saturday]

Published: Dec. 18, 2021, 8 a.m.

Guests Sagi Tzadik and Nir Ohfeld of cloud security company Wiz join Dave to discuss their research "ChaosDB: How we hacked thousands of Azure customers\u2019 databases." Nearly everything we do online these days runs through applications and databases in the cloud. While leaky storage buckets get a lot of attention, database exposure is the bigger risk for most companies because each one can contain millions or even billions of sensitive records. Every CISO\u2019s nightmare is someone getting their access keys and exfiltrating gigabytes of data in one fell swoop.\nDatabase exposures have become alarmingly common in recent years as more companies move to the cloud, and the culprit is usually a misconfiguration in the customer\u2019s environment. In this case, customers were not at fault.\nThe research can be found here:\n\nChaosDB: How we hacked thousands of Azure customers\u2019 databases\n\nChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them\n\n\nLearn more about your ad choices. Visit megaphone.fm/adchoices