Cloud - it's someone elses computer - v tem primeru Azure shara z vsemi

https://www.reuters.com/technology/excl...

"SAN FRANCISCO, Aug 26 (Reuters) - Microsoft (MSFT.O) on Thursday warned thousands of its cloud computing customers, including some of the world's largest companies, that intruders could have the ability to read, change or even delete their main databases, according to a copy of the email and a cyber security researcher."


https://www.wiz.io/blog/chaosdb-how-we-...

"So you can imagine our surprise when we were able to gain complete unrestricted access to the accounts and databases of several thousand Microsoft Azure customers, including many Fortune 500 companies. Wiz’s security research team (that’s us) constantly looks for new attack surfaces in the cloud, and two weeks ago we discovered an unprecedented breach that affects Azure’s flagship database service, Cosmos DB."

In zabava se nadaljuje:

https://www.reuters.com/technology/micr...

"In an earlier interview, Palo Alto researcher Ariel Zelivansky told Reuters his team had been able to break out of Azure's widely used system for so-called containers that store programs for users.

The Azure containers used code that had not been updated to patch a known vulnerability, he said.

As a result the Palo Alto team was able to eventually get full control of a cluster that included containers from other users."