Researchers, cybersecurity agency urge action by Microsoft cloud database users

Reuters2021-08-29

(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...

网页链接

免责声明：本文观点仅代表作者个人观点，不构成本平台的投资建议，本平台不对文章信息准确性、完整性和及时性做出任何保证，亦不对因使用或信赖文章信息引发的任何损失承担责任。

精彩评论

newwen
2021-08-30
newwen
Up
- EonWall:
  hi
- newwen:
  up
Fredwkh
2021-08-30
Fredwkh
Like and comment pls
- KlWong:
  Ok
JeffKuok
2021-08-30
JeffKuok
comment and like
- chandra:
  done
LEEKONGYONG
2021-08-30
LEEKONGYONG
Hold
- Fredwkh:
  Ok
- Mclye:
  Ok
andrew123
2021-08-30
andrew123
Nice
th1s0ne
2021-08-30
th1s0ne
interesting
- ND80:
  Yeah

发表看法

1357

{"i18n":{"language":"zh_CN"},"isChannel":false,"data":{"share":"https://www.laohu8.com/m/news/2163304079?lang=zh_CN&edition=full","thumbnail":"","is_english":true,"pubTime":"2021-08-29 07:28","share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","id":"2163304079","market":"us","top_or_hot":-1,"title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","media":"Reuters","content":"<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">网页链接</a>\n\n</div>\n","source":"yahoofinance","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">网页链接</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"MSFT","symbol_name":"微软","start_time":0,"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","article_id":"2163304079","we_media_id":null,"thumbnails":[],"rights":null,"url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","pubTimestamp":1630193325,"sourceInfo":{"source_id":"yahoofinance","name":"雅虎金融"},"weMediaInfo":null,"summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","collect":0,"end_time":0,"defaultTopTitle":"yahoo.com","property":[],"viewcount":null,"language":"en","relate_stocks":{"MSFT":"微软"},"translate_title":"研究人员、网络安全机构敦促微软云数据库用户采取行动","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"MSFT":0.9},"content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","kind":null,"is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"symbols":[],"gpt_button":1},"commentList":[{"id":811085414,"gmtCreate":1630278298638,"gmtModify":1704957588254,"author":{"id":"3577937302028167","authorId":"3577937302028167","name":"newwen","avatar":"https://static.tigerbbs.com/4c72fb9a7e595dfd0c2e4e983607d1d0","vip":1,"crmLevel":2,"crmLevelSwitch":0,"idStr":"3577937302028167","authorIdStr":"3577937302028167"},"htmlText":"Up","listText":"Up","text":"Up","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":4,"commentSize":2,"repostSize":0,"link":"https://laohu8.com/post/811085414","repostId":2163304079,"repostType":4,"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5693833,"gmtCreate":1630322092632,"gmtModify":1631894997838,"authorId":3581753259058518,"author":{"id":3581753259058518,"idStr":"3581753259058518","authorId":3581753259058518,"name":"EonWall","avatar":"https://static.tigerbbs.com/406d6be767afeba5bbdc60a9399b8565","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":811085414,"type":1,"supId":0,"prevId":0,"content":"hi","text":"hi","html":"hi"},{"id":5687017,"gmtCreate":1630278304409,"gmtModify":1631894997829,"authorId":3577937302028167,"author":{"id":3577937302028167,"idStr":"3577937302028167","authorId":3577937302028167,"name":"newwen","avatar":"https://static.tigerbbs.com/4c72fb9a7e595dfd0c2e4e983607d1d0","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":811085414,"type":1,"supId":0,"prevId":0,"content":"<u>up</u>","text":"<u>up</u>","html":"<u>up</u>"}],"langContent":"EN"},{"id":811085696,"gmtCreate":1630278285315,"gmtModify":1704957587561,"author":{"id":"3570424148942091","authorId":"3570424148942091","name":"Fredwkh","avatar":"https://static.tigerbbs.com/301d103aff8ff9955978aa630ee85588","vip":1,"crmLevel":7,"crmLevelSwitch":0,"idStr":"3570424148942091","authorIdStr":"3570424148942091"},"htmlText":"Like and comment pls&nbsp;","listText":"Like and comment pls&nbsp;","text":"Like and comment pls","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":4,"commentSize":1,"repostSize":0,"link":"https://laohu8.com/post/811085696","repostId":2163304079,"repostType":4,"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5687068,"gmtCreate":1630278601589,"gmtModify":1631895243896,"authorId":3585862393512500,"author":{"id":3585862393512500,"idStr":"3585862393512500","authorId":3585862393512500,"name":"KlWong","avatar":"https://static.tigerbbs.com/b20610400ddcc33719ca6767c3e3fbde","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":811085696,"type":1,"supId":0,"prevId":0,"content":"Ok","text":"Ok","html":"Ok"}],"langContent":"EN"},{"id":811017467,"gmtCreate":1630277578159,"gmtModify":1704957577206,"author":{"id":"3574505150334854","authorId":"3574505150334854","name":"JeffKuok","avatar":"https://static.tigerbbs.com/ef9d217367bad7520d4e3958191d5946","vip":1,"crmLevel":1,"crmLevelSwitch":0,"idStr":"3574505150334854","authorIdStr":"3574505150334854"},"htmlText":"comment and like","listText":"comment and like","text":"comment and like","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":7,"commentSize":1,"repostSize":0,"link":"https://laohu8.com/post/811017467","repostId":2163304079,"repostType":4,"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5686939,"gmtCreate":1630277874091,"gmtModify":1635136246296,"authorId":3578706888157658,"author":{"id":3578706888157658,"idStr":"3578706888157658","authorId":3578706888157658,"name":"chandra","avatar":"https://static.tigerbbs.com/a9aa38a10b67f170337a83ecf01dc8b2","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":811017467,"type":1,"supId":0,"prevId":0,"content":"done","text":"done","html":"done"}],"langContent":"EN"},{"id":811017950,"gmtCreate":1630277520570,"gmtModify":1704957576511,"author":{"id":"3570232772432396","authorId":"3570232772432396","name":"LEEKONGYONG","avatar":"https://static.tigerbbs.com/c74d9c9f2649cfda0fddd357a5291916","vip":1,"crmLevel":6,"crmLevelSwitch":0,"idStr":"3570232772432396","authorIdStr":"3570232772432396"},"htmlText":"Hold&nbsp;","listText":"Hold&nbsp;","text":"Hold","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":2,"commentSize":2,"repostSize":0,"link":"https://laohu8.com/post/811017950","repostId":2163304079,"repostType":4,"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5687014,"gmtCreate":1630278292888,"gmtModify":1631896466538,"authorId":3570424148942091,"author":{"id":3570424148942091,"idStr":"3570424148942091","authorId":3570424148942091,"name":"Fredwkh","avatar":"https://static.tigerbbs.com/301d103aff8ff9955978aa630ee85588","vip":1,"crmLevel":7,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":811017950,"type":1,"supId":0,"prevId":0,"content":"Ok","text":"Ok","html":"Ok"},{"id":5686893,"gmtCreate":1630277547911,"gmtModify":1631896466530,"authorId":3586592942167883,"author":{"id":3586592942167883,"idStr":"3586592942167883","authorId":3586592942167883,"name":"Mclye","avatar":"https://static.tigerbbs.com/c7d6caff4ccbb93636f7b7b974299e6c","vip":1,"crmLevel":1,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":811017950,"type":1,"supId":0,"prevId":0,"content":"Ok","text":"Ok","html":"Ok"}],"langContent":"EN"},{"id":811012360,"gmtCreate":1630277214650,"gmtModify":1704957572365,"author":{"id":"3576260758860416","authorId":"3576260758860416","name":"andrew123","avatar":"https://static.laohu8.com/default-avatar.jpg","vip":1,"crmLevel":4,"crmLevelSwitch":0,"idStr":"3576260758860416","authorIdStr":"3576260758860416"},"htmlText":"Nice","listText":"Nice","text":"Nice","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":4,"commentSize":0,"repostSize":0,"link":"https://laohu8.com/post/811012360","repostId":2163304079,"repostType":4,"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":811034758,"gmtCreate":1630276646374,"gmtModify":1704957561236,"author":{"id":"3579772900389006","authorId":"3579772900389006","name":"th1s0ne","avatar":"https://static.tigerbbs.com/7eb0f4a742f6158068fdbcdd23f6740c","vip":1,"crmLevel":2,"crmLevelSwitch":0,"idStr":"3579772900389006","authorIdStr":"3579772900389006"},"htmlText":"interesting","listText":"interesting","text":"interesting","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":4,"commentSize":1,"repostSize":0,"link":"https://laohu8.com/post/811034758","repostId":2163304079,"repostType":4,"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5686723,"gmtCreate":1630276661802,"gmtModify":1635136266291,"authorId":3558608283589593,"author":{"id":3558608283589593,"idStr":"3558608283589593","authorId":3558608283589593,"name":"ND80","avatar":"https://static.tigerbbs.com/1aa5537484171c6a547464db9edb933a","vip":1,"crmLevel":5,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":811034758,"type":1,"supId":0,"prevId":0,"content":"Yeah","text":"Yeah","html":"Yeah"}],"langContent":"EN"}],"isCommentEnd":false,"newsSizeData":{"likeSize":1357,"commentSize":79,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":false,"deviceId":"web-server-community-laohu8-v3","version":"4.29.0","shortVersion":"4.29.0","platform":"web","vendor":"web","appName":"laohu8","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2163304079"}