CosmosEscape: Taking Over Every Database in Azure Cosmos DB
A critical vulnerability chain in Azure Cosmos DB enabled full read and write access to every Cosmos DB database.
Yuval Avrahami
Yuval Avrahami의 게시물
Atlas: Wiz's autonomous AI Agent for vulnerability research, ranked #1 on CyberGym
See how Wiz built Atlas, an autonomous AI system for vulnerability research that validates every finding with a real, working exploit.
CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild
Wiz Research discovered a critical supply chain vulnerability that abused a CodeBuild misconfiguration to take over key AWS GitHub repositories - including the JavaScript SDK powering the AWS Console.