Vulnerabilidad Crítica en Azure Cosmos DB Expuesta Acceso a Bases de Datos a Través de Inquilinos de Clientes Introducción a la Vulnerabilidad de Cosmos DB Una vulnerabilidad recientemente descubierta en Azure Cosmos DB ha levantado alarmas significativas dentro de la comunidad de ciberseguridad. Identificada por Wiz y apodada “CosmosEscape,” esta falla permitió una posible fuga…
Critical Vulnerability in Azure Cosmos DB Exposed Database Access Across Customer Tenants Introduction to the Cosmos DB Vulnerability A recently discovered vulnerability in Azure Cosmos DB has raised significant alarms within the cybersecurity community. Identified by Wiz and dubbed “CosmosEscape,” this flaw allowed for a potential escape from the Gremlin query sandbox, which could have…
State-Sponsored Hackers Exploit AnySign4PC Vulnerabilities via Compromised South Korean Websites Background and Context The recent revelation of a state-sponsored cyber campaign targeting South Korean citizens has raised significant alarms within the cybersecurity community. South Korean authorities, in collaboration with four key security firms, have disclosed that trusted domestic websites were compromised to exploit vulnerabilities in…