CosmosEscape: Taking Over Every Database in Azure Cosmos DB
A critical vulnerability chain in Azure Cosmos DB enabled full read and write access to every Cosmos DB database.
Yuval Avrahami
Yuval Avrahami の投稿
Atlasのご紹介：WizのAI脆弱性リサーチャー
実証可能なリアルなエクスプロイトを用いてすべての検出結果を検証する、脆弱性調査のための自律型AIシステム「Atlas」をWizがどのように構築したかをご覧ください。
CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild
Wiz Research discovered a critical supply chain vulnerability that abused a CodeBuild misconfiguration to take over key AWS GitHub repositories - including the JavaScript SDK powering the AWS Console.