Wiz found a master key that could access every database in Azure's Cosmos DB. #cosmosescape
Whoops.
https://nitter.net/yuvalavra/status/2082864672294736324
My present to all of you: Go ahead and think a bit about why such a key even exists. Go ahead...
Will Dormann
npub1n3…rk88f
2026-07-30 23:56:18 UTC
Author Public Key
npub1n3aew4nfpzqwqmws43pydswj06vu97wch6upnchrz4ku8ckc60nqfrk88fSeen on
wss://relay.ditto.pubPublished at
2026-07-30 23:56:18 UTCEvent JSON
{
"id": "739b3dae97079af5099c2ca84eaf952b33f48a87b5022c3e96877276661b32ca",
"pubkey": "9c7b9756690880e06dd0ac4246c1d27e99c2f9d8beb819e2e3156dc3e2d8d3e6",
"created_at": 1785455778,
"kind": 1,
"tags": [
[
"t",
"cosmosescape"
],
[
"proxy",
"https://infosec.exchange/users/wdormann/statuses/117011629918025521",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "Wiz found a master key that could access every database in Azure's Cosmos DB. #cosmosescape \n\nWhoops.\n\nhttps://nitter.net/yuvalavra/status/2082864672294736324\n\nMy present to all of you: Go ahead and think a bit about why such a key even exists. Go ahead...",
"sig": "73cafc0ffbe6c742e3b689fe10405b8ebb5e27d399eb612c8621e897f56e7f62acfd82c0b58b0e61f983a762ef83663ae4bb961716209d0d19e12d8cbabeb20c"
}