#CHAOSDB - Twitter Hashtag

over 3 years ago

🪄 Discover the magic behind #BingBang and #ChaosDB vulnerabilities with our cloud security researchers at RSA 2023. We're hosting a private hands-on workshop about cloud exposures (and the dark arts). Reserve a seat for you and your friends here 👇 https://t.co/sobkB8SbBI

wiz_io's tweet photo. 🪄 Discover the magic behind #BingBang and #ChaosDB vulnerabilities with our cloud security researchers at RSA 2023.

We're hosting a private hands-on workshop about cloud exposures (and the dark arts). Reserve a seat for you and your friends here 👇

https://t.co/sobkB8SbBI https://t.co/fK8KKl9Rmt

0

26

7

2

5K

alon

@41thexplorer

almost 4 years ago

In the past 2 years multiple critical cross-tenant cloud vulnerabilities were discovered (#ChaosDB). I’m proud to share #PEACH, by @AmitaiCo, an isolation framework aimed to reduce such risks in Cloud applications ⛅️ >> https://t.co/nbx71V9BvR

0

16

3

1

0

Immanuel Chavoya @FullM3talPacket

over 4 years ago

As a former SOC analyst, incident responder and current Product Security manager, its worth providing some context to vulnerability observed through research rather than active exploitation (cleanup of a Zero Day). #synlapse #omigod #chaosDB #autowarp #azurescape

FullM3talPacket's tweet photo. As a former SOC analyst, incident responder and current Product Security manager, its worth providing some context to vulnerability observed through research rather than active exploitation (cleanup of a Zero Day).

#synlapse #omigod #chaosDB #autowarp #azurescape https://t.co/H8syiius8G

Tzah Pahima @TzahPahima

over 4 years ago

I was able to access #Azure user credentials and run code on other customers’ machines. The vulnerability is called #SynLapse. It was a vulnerability in Azure Synapse Analytics (@Azure_Synapse) & Azure Data Factory, exploiting a major flaw in the tenant separation. (1/3)

7

433

143

59

0

1

3

0

sagitz

@sagitz_

over 4 years ago

At Black Hat Europe 2021, we presented our research of #ChaosDB - a major cross-account issue in Azure Cosmos DB. Here’s the research as a refresher (https://t.co/VL0LRF4iG4) Following Black Hat, we wondered – could we reproduce a similar issue in other Azure services? (2/n)

1

9

1

0

sagitz

@sagitz_

over 4 years ago

Our (+@nirohfeld) #BlackHat session about #ChaosDB (Cosmos DB Account Takeover Vulnerability in Azure) is out!🤩@wiz_io #BugBounty https://t.co/Rb8JWWr7LM

1

45

13

2

0

Nir Ohfeld

@nirohfeld

over 4 years ago

Recordings from #BHEU are now available! If you are interested in #CloudSecurity make sure you watch our (+@sagitz_) session about #ChaosDB @wiz_io https://t.co/NjerTluEtb

0

15

1

2

0

Brainboard @brainboard_co

over 4 years ago

🔑 ☁️ Vulnerability in the Cloud Orca Security team proved that they can hack into all #AWS resources in all AWS accounts! Worse than #ChaosDB! 😈 2 security issues: - AWS #CloudFormation - AWS #Glue https://t.co/QRcJXe68WK #cloudgovernance #AWSvulnerability #cloud

0

3

1

0

Michael Brewer @mikepb78

almost 5 years ago

@__steele I am pretty sure @azure would not have allowed that kind of discussion. Based on #chaosdb #omigod #NotLegit and more?

2

4

0

CyberWire Daily, by N2K @thecyberwire

almost 5 years ago

#ResearchSaturday: Security researchers Sagi Tzadik and Nir Ohfeld of #cloudsecurity company @wiz_io join @bittner to discuss their research "#ChaosDB: How we hacked thousands of #Azure customers’ databases." Have a listen: https://t.co/864Z6TZHWv

thecyberwire's tweet photo. #ResearchSaturday: Security researchers Sagi Tzadik and Nir Ohfeld of #cloudsecurity company @wiz_io join @bittner to discuss their research "#ChaosDB: How we hacked thousands of #Azure customers’ databases." Have a listen: https://t.co/864Z6TZHWv https://t.co/dRpopgoYga

0

2

1

0

alon

@41thexplorer

almost 5 years ago

What's the issue with cloud vulnerabilities? Cloud services are unversioned, remediation is complex, reporting is self governed by CSPs, and there is no centralized DB like the CVE DB. Let’s imagine we had a #CloudCVE system. What could it look like for @Azure #ChaosDB? 1/N

Scott Piper

@0xdabbad00

almost 5 years ago

@shirtamari I'm going to do a weekend project to put all the cloud provider issues I know of into a repo. Planning on listing them roughly by date they were found and including cloud provider, researcher, some sort of severity or impact, whether customer action was required, summary.

2

44

4

3

0

3

33

8

3

0

Sarbjeet Johal

@sarbjeetjohal

almost 5 years ago · Fremont

Wow! This is a serious security flaw on @Azure. Access to 1000s of Azure customer’s data, is really jaw-dropping @cloudpundit On a funny note, #ChaosDB lives up to its name! @dhinchcliffe @dvellante @jengates @om @CaseyNewton @rinkisethi @QuinnyPig @furrier @eric_kavanagh

Lydia Leong @cloudpundit

almost 5 years ago

This is jaw-dropping stuff. Make sure to read the full update on the scope of vulnerability. https://t.co/uv8GZJKm0F

2

19

7

1

0

1

10

2

0

alon

@41thexplorer

almost 5 years ago

@msftsecresponse assigned a CVE to a key leak vulnerability in AZURE SERVICES ❗ The CVE page details affected services, timelines, risk and required actions. Kudos to MSFT for learning from #ChaosDB and setting a better standard for cloud vulns #CloudCVE https://t.co/x46vB7a86W

1

14

4

1

0

John Kinsella @johnlkinsella

almost 5 years ago

Also - the bounty that msft paid @wiz_io for #ChaosDB is off by a factor of 10 - probably 100.

0

1

0

Richard S. @Richard_S81

almost 5 years ago

#Hacking #ChaosDB #Malware #Vulnerability #CyberCrime #CyberAttack #CyberSecurity Wiz Research Team disclosed technical details about the discovery of the ChaosDB vulnerability in Azure Cosmos DB database solution. https://t.co/uYw6G2lnKi

0

2

3

0

Pierluigi Paganini - Security Affairs @securityaffairs

almost 5 years ago

How we broke the cloud with two lines of code: the full story of #ChaosDB https://t.co/07Dbp96mA4 #securityaffairs #hacking #Azure

0

3

1

0

Pierluigi Paganini - Security Affairs @securityaffairs

almost 5 years ago

How we broke the cloud with two lines of code: the full story of #ChaosDB https://t.co/07Dbp96mA4 #securityaffairs #hacking #Azure

0

2

1

0

Ami Luttwak @amiluttwak

almost 5 years ago

@JosephBialek Imagine @wiz researchers wouldn’t have disclosed #ChaosDB, a bad actor could have copied data from thousands of companies, potentially even from other MS services like Officr365 leveraging CosmosDB. It would have been devastating to Azure users. Researchers can make an impact!

0

2

0

Ami Luttwak @amiluttwak

almost 5 years ago

@QuinnyPig @Azure #ChaosDB is unprecedented. With two lines of code @wiz researchers got access to dozens of @Azure infra secrets holding the keys to the kingdom.

0

5

2

0

Ami Luttwak @amiluttwak

almost 5 years ago

@QuinnyPig @Azure The cloud providers are not accountable to no one. This is why we started #cloudCVE, each of us can start from asking @Azure to assign a CVE to #ChaosDB and provide a full disclosure on the incident https://t.co/dr17WGejcV

0

10

3

0

Ami Luttwak @amiluttwak

almost 5 years ago

The severity and implications of #ChaosDB are ground breaking, an attacker could have compromised a core Azure infra service with 2 lines of code

Corey Quinn (in London this week)

@QuinnyPig

almost 5 years ago

Okay, @azure friends; if you don’t do an in-depth response to this, I’m going to have to do one. Neither one of us wants that. This is *REALLY BAD*; your complete silence as to how it was possible is far worse.

12

193

30

29

0

3

1

0

Top Tweets for #CHAOSDB

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users