Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database

AI Summary

Wiz researchers discovered and disclosed 'CosmosEscape,' a now-patched exploit chain in Azure Cosmos DB that began with a crafted Gremlin query and allowed sandbox escape to obtain a platform-wide key granting full read/write access to databases across customer tenants. The cross-tenant data exposure potential makes this a critical cloud security incident affecting Azure's multi-tenant isolation model.

Read full article → https://thehackernews.com/2026/07/azure-cosmos-db-…

Relevance score: 83.0/100

# More from July 31

1
Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests BleepingComputer
2
Max-severity Exchange server flaw under active exploitation by Kremlin hackers Ars Technica Security
3
Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation The Hacker News
4
VMware fixes three critical flaws allowing auth bypass, VM escapes BleepingComputer
5
Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data The Hacker News
6
Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet The Hacker News
7
Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline The Hacker News
8
JetBrains warns of critical TeamCity remote code execution flaw BleepingComputer
10
Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads The Hacker News