IT Consultancy
IT Consultancy Get expert guidance to leverage technology for your business growth. We help you identify the right IT solutions, optimize infrastructure, and ensure your digital environment is secure,…
Danger! Azure Cosmos DB Flaw Exposed Access to All Databases
Digital Marketing
Digital Marketing Grow your brand and reach the right audience with data-driven marketing strategies. We help you create campaigns that convert, manage social channels effectively, and optimize your d…
Privacy Policy
Privacy Policy At CometSoul, accessible from https://cometsoul.com, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collec…
Terms and Conditions
Welcome to CometSoul! These terms and conditions outline the rules and regulations for the use of CometSoul’s Website, located at https://cometsoul.com. By accessing this website we assume you a…
Disclaimer
If you require any more information or have any questions about our site’s disclaimer, please feel free to contact us. Disclaimers for CometSoul All the information on this website – https…
Managed Wi-Fi Service
Managed Wi-Fi Service Build a fast, stable, and secure Wi-Fi for your business at Zero depreciation cost. Enterprise-Grade Guest Wi-Fi With $0 Upfront Hardware Costs. We provide, install, and support …
Smart Business System Integrator
Smart Business System Integrator Simplify your daily operations with smart systems that automate bookings, schedules, and routine tasks so you can focus on growing your business. We set up and integra…
IT Procurement & Hardware Managed Service
IT Procurement & Hardware Managed Service Keep your technology running smoothly from the hardware you use every day to the systems that power your business. We provide end-to-end IT management so …
Security researchers from Wiz discovered a critical vulnerability (bug) in Microsoft’s Azure Cosmos DB service. Dubbed CosmosEscape, this flaw allowed attackers to gain full read and write access to databases across all customer tenants.
By only using a standard Azure account and an attacker-controlled Gremlin Cosmos DB database, hackers could execute an exploit to steal a platform-wide master key. If successful, attackers could take over other customers’ databases, including private and network-isolated ones.
Worse, this master key could unlock accounts across various regions and Application Programming Interfaces (APIs), such as SQL, MongoDB, Cassandra, and Gremlin APIs.
Microsoft’s Quick Response
Wiz first reported the CosmosEscape finding in November 2025. Microsoft acted quickly. In less than 48 hours, Microsoft successfully blocked the vulnerable Gremlin entry point.
Subsequently, a comprehensive fix (patch) for all service regions was finally completed in July 2026. Microsoft ensured that the platform-wide master key that caused the issue had been completely eliminated.
Based on internal investigation results, Microsoft confirmed that there was no unauthorized access activity other than the testing conducted by the Wiz research team. Customer data is confirmed safe, meaning Azure Cosmos DB users do not need to take any additional security actions.
The Wiz research team plans to reveal the complete technical details of the CosmosEscape exploit at the Black Hat USA cybersecurity event in early August.
Source: https://thehackernews.com/2026/07/azure-cosmos-db-flaw-exposed-platform.html