Wiz

Ronen Shustin

Security Researcher at Wiz

Hell’s Keychain: Supply-chain vulnerability in IBM Cloud Databases for PostgreSQL allows potential unauthorized database access

Ronen Shustin, Shir Tamari
How IBM Cloud caught us exploring its infrastructure and how a hardcoded secret eventually led to build artifact access and manipulation

The cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors

Ronen Shustin, Shir Tamari, Nir Ohfeld, Sagi Tzadik
How Wiz Research uncovered multiple related vulnerabilities in PostgreSQL-as-a-Service offerings from GCP, Azure, and others.

Wiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL

Ronen Shustin, Sagi Tzadik, Nir Ohfeld, Shir Tamari
Wiz Research discovers a chain of critical vulnerabilities in the widely used Azure Database for PostgreSQL Flexible Server.