ChaosDB - How We Hacked Databases of Thousands of Azure Customers

ChaosDB - How We Hacked Databases of Thousands of Azure Customers

Dive into a detailed exploration of ChaosDB, a critical cross-tenant vulnerability discovered in Azure Cosmos DB. Learn how the Wiz Research Team uncovered this unprecedented cloud vulnerability that allowed any Azure user to gain full admin access to thousands of customers' databases without authorization. Understand the technical aspects of the exploit, including Jupyter Notebook LPE, unrestricted network access, and the intricacies of WireServer. Follow the step-by-step process of the full exploit, from initial reconnaissance to account service takeover. Gain insights into the disclosure timeline and the far-reaching implications of this security breach for organizations using Azure's flagship managed database solution.