Which major companies used the vulnerable Microsoft Azure database?

Question

Accepted Answer

Major Companies Used Vulnerable Microsoft Azure Database

Several thousand Microsoft Azure customers, including prominent Fortune 500 companies, were potentially exposed by a flaw in the Cosmos DB service. Companies such as Coca-Cola and Exxon-Mobil, which rely on Cosmos DB for real-time global data management, were among those notified by Microsoft.
Data Access Keys Compromised

A cybersecurity firm, Wiz, discovered a vulnerability in the access keys for Microsoft Azure's Cosmos DB service, which allowed for unrestricted access to customer accounts and databases. This flaw left data vulnerable for an extended period, potentially months or even years, before it was identified.
Widespread Customer Notification

Microsoft informed more than 30 percent of its Cosmos DB customers that they needed to update their access keys due to the security issue. Wiz noted that Microsoft's notifications were limited to customers affected during their specific research timeframe, suggesting a broader risk beyond those directly contacted.
No Evidence of Exploitation

Despite the significant vulnerability, Microsoft stated that there was no evidence to suggest that malicious actors had exploited the flaw. The company acted swiftly to fix the issue once it was discovered to ensure customer safety and data protection.

Reading history

Hide →

This history is cleared when the page is closed.

Which major companies used the vulnerable Microsoft Azure database?

Loading

Was this article helpful?

Helpful

Not helpful

Report an issue

1

0

0

Share with friends