8 ms·
Not quite. To clarify, 30% of customers were notified of the issue. A larger, currently undetermined number are projected to have been exposed to the vulnerabil
by PeterCorless 5y ago
Not quite. To clarify, 30% of customers were notified of the issue. A larger, currently undetermined number are projected to have been exposed to the vulnerability.
"every Cosmos DB customer should assume they’ve been exposed" — Wiz.
- CyanLite2 5y agoSeriously doubt there are more than 30% of Microsoft customers who ran CosmosDB with a wide open firewall. Any serious corporate customer would be in breach of even the most basic security/compliance rules.
- ctvo 5y agoThis is an extraordinary position to take, one because it assumes "serious corporate customers" somehow take security seriously. Every. Week. There's a new breach from a "serious corporate customer". Then there's this: > So you can imagine our surprise when we were able to gain complete unrestricted access to the accounts and databases of several thousand Microsoft Azure customers, *including many Fortune 500 companies*. Source: https://www.wiz.io/blog/chaosdb-how-we-hacked-thousands-of-azure-customers-databases https://www.wiz.io/blog/chaosdb-how-we-hacked-thousands-of-a...
- psanford 5y agoWithout more details its really hard to say. One would assume that Microsoft is at least competent enough to notify potentially affected customers.