0:00 / 0:00
ChaosDB: How We Hacked Databases of Thousands of Azure Customers (rev)
Black Hat
281K subscribers • 47 videos on Hallway • Conference channel
- One of the most-watched uploads on Black Hat, a conference or university channel Hallway lists. Nobody has recommended it in the communities yet, so it ranks below community picks.
- Presented by Nir Ohfeld & Sagi Tzadik, Wiz Research Team
Advanced. Deep dive for people who know the field.
19K views4 years ago
SecurityDatabases and dataExploits and vulnerabilitiesAzureNoSQL and document databases
Nir Ohfeld and Sagi Tzadik explain how they discovered ChaosDB, a critical cross-tenant vulnerability in Azure Cosmos DB that allowed full admin access.
In August 2021, the Wiz Research Team uncovered ChaosDB - a critical cross-tenant vulnerability in Azure Cosmos DB, Azure's flagship managed database solution which is used by countless organizations. This vulnerability is every company’s worst nightmare: even a flawless environment is affected. Easily exploitable, this bug allowed any Azure user to have full admin access to thousands of customers' databases, including Fortune 500 companies, without any procedural authorization.This is an unprecedented cloud vulnerability... By: Nir Ohfeld & Sagi Tzadik Full Abstract & Presentation Materials: blackhat.com/eu-21/briefings/schedule/#chaosdb-how-we-hacked…Why it's here
A top upload from a listed channelBlack Hat is on Hallway's list of conference and university channels, and this upload is one of its most-watched talks or lectures. Nobody has recommended it in the communities yet, so it ranks below community picks.