We missed this earlier: The Indian Computer Emergency Response Team (CERT-In) issued an advisory on August 27, warning against a critical security vulnerability in Microsoft Azure's cloud platform Cosmos DB. According to the advisory, a vulnerability in open-source platform Jupyter Notebook - used for data sharing and visualisation on Cosmos - exposed primary keys of users (which are used for administrative purposes to manage user accounts, according to a Microsoft webpage), potentially giving an attacker admin access to data stored by affected accounts. According to CERT-In, the vulnerability could allow a hacker unrestricted access to download, delete, or manipulate any user data stored on the Cosmos DB platform. Earlier this year, Microsoft had reportedly turned the Jupyter Notebook feature on by default for all Cosmos DB instances, including those by Fortune 500 companies Exxon Mobile and Coca-Cola. A day before the CERT-In advisory, Microsoft notified 30% of its customers who may have been impacted by the breach, Reuters reported. Cloud security firm Wiz.io who first alerted Microsoft about the issue, said that the vulnerability had existed for a few months before it was flagged and may have impacted all customers. Here's an illustration of the vulnerability: [caption id="" align="aligncenter" width="494"] Source: Wix.io[/caption] Microsoft asks customers to reset keys On August 26, according to a Wix.io blog, Microsoft mailed its customers the following statement: Microsoft has recently become aware of a vulnerability in Azure Cosmos DB that could potentially allow a user to gain access to another customer's resources by using the account's…
News
Microsoft Azure customers warned about critical security flaw that exposed data to hackers
The cloud platform’s users were advised to take urgent steps against a security flaw that had existed for months.
Please subscribe to MediaNama. Don't share prints and PDFs.
You May Also Like
News
Google has released a Google Travel Trends Report which states that branded budget hotel search queries grew 179% year over year (YOY) in India, in...
Advert
135 job openings in over 60 companies are listed at our free Digital and Mobile Job Board: If you’re looking for a job, or...
News
By Aroon Deep and Aditya Chunduru You’re reading it here first: Twitter has complied with government requests to censor 52 tweets that mostly criticised...
News
Rajesh Kumar* doesn’t have many enemies in life. But, Uber, for which he drives a cab everyday, is starting to look like one, he...