Researchers, cybersecurity agency urge action by Microsoft cloud database users

1.36K
79
Favorite

Researchers, cybersecurity agency urge action by Microsoft cloud database users

Reuters2021-08-29

(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

1.36K

Report

Comment（79）

newwen
·2021-08-30
Up
Reply
4
Report
Fold Replies
- EonWall:
  hi
  2021-08-30
  Reply
  Report
- newwen:
  up
  2021-08-30
  Reply
  Report
Fredwkh
·2021-08-30
Like and comment pls
Reply
4
Report
Fold Replies
- KlWong:
  Ok
  2021-08-30
  Reply
  Report
JeffKuok
·2021-08-30
comment and like
Reply
7
Report
Fold Replies
- chandra:
  done
  2021-08-30
  Reply
  Report
LEEKONGYONG
·2021-08-30
Hold
Reply
2
Report
Fold Replies
- Fredwkh:
  Ok
  2021-08-30
  Reply
  Report
- Mclye:
  Ok
  2021-08-30
  Reply
  Report
andrew123
·2021-08-30
Nice
Reply
4
Report
th1s0ne
·2021-08-30
interesting
Reply
4
Report
Fold Replies
- ND80:
  Yeah
  2021-08-30
  Reply
  Report
SaberNoTooth
·2021-08-30
pls like. thanks
Reply
6
Report
Fold Replies
- RK888:
  Okay
  2021-08-30
  Reply
  Report
ramius75
·2021-08-30
every other day… new bugs from MS… ?
Reply
4
Report
Fold Replies
- MengKeng:
  yup, scary indeed. well, SW is written by humans and it will be prone to errors unless there are stringent checks
  2021-08-30
  Reply
  Report
ML808
·2021-08-30
Serious problem to be address.
Reply
4
Report
Fold Replies
- ML808:
  true
  2021-08-30
  Reply
  Report
xremy
·2021-08-30
Go.. Up.. Up. Up..
Reply
3
Report
El_Nino
·2021-08-30
Like n comment pls
Reply
2
Report
Fold Replies
- Ag1718:
  Like
  2021-08-30
  Reply
  Report
小虎一只
·2021-08-30
一
Reply
2
Report
小虎一只
·2021-08-30
一
Reply
3
Report
J90
·2021-08-30
Like me
Reply
3
Report
Fold Replies
- 小虎一只:
  上
  2021-08-30
  Reply
  Report
Xue91
·2021-08-30
Ohhhh
Reply
2
Report
土金水木火
·2021-08-30
Ok
Reply
2
Report
Fold Replies
- Xue91:
  Yes
  2021-08-30
  Reply
  Report
- J90:
  Ok
  2021-08-30
  Reply
  Report
kcdc86
·2021-08-30
Like pls.. Thanks..
Reply
3
Report
Fold Replies
- 土金水木火:
  Done
  2021-08-30
  Reply
  Report
neoh
·2021-08-29
Like
Reply
2
Report
Fold Replies
- neoh:
  thanks
  2021-09-04
  Reply
  Report
- neoh:
  thanks
  2021-08-30
  Reply
  Report
- Junpani:
  comment
  2021-08-29
  Reply
  Report
ACCY
·2021-08-29
Goodness ?
Reply
4
Report
CLOUD1127
·2021-08-29
ok
Reply
4
Report
Fold Replies
- cuteypie:
  OK
  2021-08-29
  Reply
  Report
- JHFG:
  k
  2021-08-29
  Reply
  Report

Most Discussed

7x24

All

Terms and Conditions·Privacy Policy

Company: TTMF Limited. Tech supported by Xiangshang Yixin.

Email：uservice@ttm.financial

{"i18n":{"language":"en_US"},"data":{"share":"https://ttm.financial/m/news/2163304079?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2021-08-29 07:28","share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","id":"2163304079","market":"us","top_or_hot":-1,"title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","media":"Reuters","content":"<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Source Link</a>\n\n</div>\n","source":"yahoofinance","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"MSFT","symbol_name":"微软","start_time":0,"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","article_id":"2163304079","we_media_id":null,"thumbnails":[],"rights":null,"url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","pubTimestamp":1630193325,"sourceInfo":{"source_id":"yahoofinance","name":"雅虎金融"},"weMediaInfo":null,"summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","collect":0,"end_time":0,"defaultTopTitle":"yahoo.com","property":[],"viewcount":null,"language":"en","relate_stocks":{"MSFT":"微软"},"translate_title":"研究人员、网络安全机构敦促微软云数据库用户采取行动","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"MSFT":0.9},"content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","kind":null,"is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"symbols":[],"gpt_button":1},"commentList":[{"id":811085414,"gmtCreate":1630278298638,"gmtModify":1676530253142,"author":{"id":"3577937302028167","authorId":"3577937302028167","name":"newwen","avatar":"https://community-static.tradeup.com/news/d76e150284d102a1d312d08f6f90af41","vip":1,"crmLevel":2,"crmLevelSwitch":0,"idStr":"3577937302028167","authorIdStr":"3577937302028167"},"htmlText":"Up","listText":"Up","text":"Up","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":4,"commentSize":2,"repostSize":0,"link":"https://ttm.financial/post/811085414","repostId":2163304079,"repostType":4,"repost":{"id":"2163304079","pubTimestamp":1630193325,"share":"https://ttm.financial/m/news/2163304079?lang=&edition=fundamental","pubTime":"2021-08-29 07:28","market":"us","language":"en","title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","media":"Reuters","summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","content":"<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.</p>\n<p>As first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.</p>\n<p>Alerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.</p>\n<p>In a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.</p>\n<p>\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.</p>\n<p>\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.</p>\n<p>The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.</p>\n<p>\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.</p>\n<p>Experts at Wiz, founded by four veterans of Azure's in-house security team, agreed.</p>\n<p>\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said <a href=\"https://laohu8.com/S/AONE.U\">one</a> of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.</p>\n<p>Microsoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.</p>\n<p>\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.</p>\n<p>Wiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.</p>\n<p>\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.</p>","source":"yahoofinance","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","is_english":true,"share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","article_id":"2163304079","content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5693833,"gmtCreate":1630322092632,"gmtModify":1663233113057,"authorId":3581753259058518,"author":{"id":3581753259058518,"idStr":"3581753259058518","authorId":3581753259058518,"name":"EonWall","avatar":"https://static.tigerbbs.com/406d6be767afeba5bbdc60a9399b8565","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":811085414,"type":1,"supId":0,"prevId":0,"content":"hi","text":"hi","html":"hi"},{"id":5687017,"gmtCreate":1630278304409,"gmtModify":1631894997829,"authorId":3577937302028167,"author":{"id":3577937302028167,"idStr":"3577937302028167","authorId":3577937302028167,"name":"newwen","avatar":"https://community-static.tradeup.com/news/d76e150284d102a1d312d08f6f90af41","vip":1,"currentWearingBadge":{"badgeId":"44212b71d0be4ec88898348dbe882e03-1","templateUuid":"44212b71d0be4ec88898348dbe882e03","name":"Boss Tiger","description":"The transaction amount of the securities account reaches $100,000","bigImgUrl":"https://static.tigerbbs.com/c8dfc27c1ee0e25db1c93e9d0b641101","smallImgUrl":"https://static.tigerbbs.com/f43908c142f8a33c78f5bdf0e2897488","grayImgUrl":"https://static.tigerbbs.com/82165ff19cb8a786e8919f92acee5213","redirectLinkEnabled":0,"hasAllocated":1,"isWearing":1,"stampPosition":0,"hasStamp":0,"allocationCount":1,"allocatedDate":"2021.12.28","exceedPercentage":"60.23%","individualDisplayEnabled":0,"individualDisplaySort":0,"categoryType":1101},"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":811085414,"type":1,"supId":0,"prevId":0,"content":"<u>up</u>","text":"<u>up</u>","html":"<u>up</u>"}],"langContent":"EN"},{"id":811085696,"gmtCreate":1630278285315,"gmtModify":1676530253158,"author":{"id":"3570424148942091","authorId":"3570424148942091","name":"Fredwkh","avatar":"https://static.tigerbbs.com/301d103aff8ff9955978aa630ee85588","vip":1,"crmLevel":7,"crmLevelSwitch":1,"idStr":"3570424148942091","authorIdStr":"3570424148942091"},"htmlText":"Like and comment pls&nbsp;","listText":"Like and comment pls&nbsp;","text":"Like and comment pls","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":4,"commentSize":1,"repostSize":0,"link":"https://ttm.financial/post/811085696","repostId":2163304079,"repostType":4,"repost":{"id":"2163304079","pubTimestamp":1630193325,"share":"https://ttm.financial/m/news/2163304079?lang=&edition=fundamental","pubTime":"2021-08-29 07:28","market":"us","language":"en","title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","media":"Reuters","summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","content":"<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.</p>\n<p>As first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.</p>\n<p>Alerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.</p>\n<p>In a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.</p>\n<p>\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.</p>\n<p>\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.</p>\n<p>The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.</p>\n<p>\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.</p>\n<p>Experts at Wiz, founded by four veterans of Azure's in-house security team, agreed.</p>\n<p>\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said <a href=\"https://laohu8.com/S/AONE.U\">one</a> of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.</p>\n<p>Microsoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.</p>\n<p>\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.</p>\n<p>Wiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.</p>\n<p>\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.</p>","source":"yahoofinance","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","is_english":true,"share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","article_id":"2163304079","content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5687068,"gmtCreate":1630278601589,"gmtModify":1663233081740,"authorId":3585862393512500,"author":{"id":3585862393512500,"idStr":"3585862393512500","authorId":3585862393512500,"name":"KlWong","avatar":"https://static.tigerbbs.com/b20610400ddcc33719ca6767c3e3fbde","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":811085696,"type":1,"supId":0,"prevId":0,"content":"Ok","text":"Ok","html":"Ok"}],"langContent":"EN"},{"id":811017467,"gmtCreate":1630277578159,"gmtModify":1676530252982,"author":{"id":"3574505150334854","authorId":"3574505150334854","name":"JeffKuok","avatar":"https://static.tigerbbs.com/ef9d217367bad7520d4e3958191d5946","vip":1,"crmLevel":1,"crmLevelSwitch":0,"idStr":"3574505150334854","authorIdStr":"3574505150334854"},"htmlText":"comment and like","listText":"comment and like","text":"comment and like","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":7,"commentSize":1,"repostSize":0,"link":"https://ttm.financial/post/811017467","repostId":2163304079,"repostType":4,"repost":{"id":"2163304079","pubTimestamp":1630193325,"share":"https://ttm.financial/m/news/2163304079?lang=&edition=fundamental","pubTime":"2021-08-29 07:28","market":"us","language":"en","title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","media":"Reuters","summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","content":"<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.</p>\n<p>As first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.</p>\n<p>Alerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.</p>\n<p>In a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.</p>\n<p>\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.</p>\n<p>\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.</p>\n<p>The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.</p>\n<p>\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.</p>\n<p>Experts at Wiz, founded by four veterans of Azure's in-house security team, agreed.</p>\n<p>\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said <a href=\"https://laohu8.com/S/AONE.U\">one</a> of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.</p>\n<p>Microsoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.</p>\n<p>\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.</p>\n<p>Wiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.</p>\n<p>\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.</p>","source":"yahoofinance","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","is_english":true,"share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","article_id":"2163304079","content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5686939,"gmtCreate":1630277874091,"gmtModify":1663233081835,"authorId":3578706888157658,"author":{"id":3578706888157658,"idStr":"3578706888157658","authorId":3578706888157658,"name":"chandra","avatar":"https://static.tigerbbs.com/a9aa38a10b67f170337a83ecf01dc8b2","vip":1,"crmLevel":3,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":811017467,"type":1,"supId":0,"prevId":0,"content":"done","text":"done","html":"done"}],"langContent":"EN"},{"id":811017950,"gmtCreate":1630277520570,"gmtModify":1676530252974,"author":{"id":"3570232772432396","authorId":"3570232772432396","name":"LEEKONGYONG","avatar":"https://static.tigerbbs.com/c74d9c9f2649cfda0fddd357a5291916","vip":1,"hat":"https://static.tigerbbs.com/646756f1284a5a6480ed02cc4fa7d1d2","crmLevel":4,"crmLevelSwitch":1,"idStr":"3570232772432396","authorIdStr":"3570232772432396"},"htmlText":"Hold&nbsp;","listText":"Hold&nbsp;","text":"Hold","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":2,"commentSize":2,"repostSize":0,"link":"https://ttm.financial/post/811017950","repostId":2163304079,"repostType":4,"repost":{"id":"2163304079","pubTimestamp":1630193325,"share":"https://ttm.financial/m/news/2163304079?lang=&edition=fundamental","pubTime":"2021-08-29 07:28","market":"us","language":"en","title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","media":"Reuters","summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","content":"<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.</p>\n<p>As first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.</p>\n<p>Alerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.</p>\n<p>In a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.</p>\n<p>\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.</p>\n<p>\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.</p>\n<p>The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.</p>\n<p>\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.</p>\n<p>Experts at Wiz, founded by four veterans of Azure's in-house security team, agreed.</p>\n<p>\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said <a href=\"https://laohu8.com/S/AONE.U\">one</a> of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.</p>\n<p>Microsoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.</p>\n<p>\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.</p>\n<p>Wiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.</p>\n<p>\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.</p>","source":"yahoofinance","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","is_english":true,"share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","article_id":"2163304079","content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5687014,"gmtCreate":1630278292888,"gmtModify":1663233082228,"authorId":3570424148942091,"author":{"id":3570424148942091,"idStr":"3570424148942091","authorId":3570424148942091,"name":"Fredwkh","avatar":"https://static.tigerbbs.com/301d103aff8ff9955978aa630ee85588","vip":1,"crmLevel":7,"crmLevelSwitch":1,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":811017950,"type":1,"supId":0,"prevId":0,"content":"Ok","text":"Ok","html":"Ok"},{"id":5686893,"gmtCreate":1630277547911,"gmtModify":1663233081446,"authorId":3586592942167883,"author":{"id":3586592942167883,"idStr":"3586592942167883","authorId":3586592942167883,"name":"Mclye","avatar":"https://static.itradeup.com/news/fc367014307c9a0999b85a4a4cbd4c1b","vip":1,"crmLevel":1,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":811017950,"type":1,"supId":0,"prevId":0,"content":"Ok","text":"Ok","html":"Ok"}],"langContent":"EN"},{"id":811012360,"gmtCreate":1630277214650,"gmtModify":1676530252902,"author":{"id":"3576260758860416","authorId":"3576260758860416","name":"andrew123","avatar":"https://community-static.tradeup.com/news/f2a1eaba26272212d42018e60e78b422","vip":1,"hat":"https://static.tigerbbs.com/4c5ceab71416b120bab4604c0754b52a","crmLevel":5,"crmLevelSwitch":0,"idStr":"3576260758860416","authorIdStr":"3576260758860416"},"htmlText":"Nice","listText":"Nice","text":"Nice","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":4,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/811012360","repostId":2163304079,"repostType":4,"repost":{"id":"2163304079","pubTimestamp":1630193325,"share":"https://ttm.financial/m/news/2163304079?lang=&edition=fundamental","pubTime":"2021-08-29 07:28","market":"us","language":"en","title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","media":"Reuters","summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","content":"<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.</p>\n<p>As first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.</p>\n<p>Alerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.</p>\n<p>In a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.</p>\n<p>\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.</p>\n<p>\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.</p>\n<p>The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.</p>\n<p>\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.</p>\n<p>Experts at Wiz, founded by four veterans of Azure's in-house security team, agreed.</p>\n<p>\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said <a href=\"https://laohu8.com/S/AONE.U\">one</a> of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.</p>\n<p>Microsoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.</p>\n<p>\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.</p>\n<p>Wiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.</p>\n<p>\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.</p>","source":"yahoofinance","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","is_english":true,"share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","article_id":"2163304079","content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":811034758,"gmtCreate":1630276646374,"gmtModify":1676530252747,"author":{"id":"3579772900389006","authorId":"3579772900389006","name":"th1s0ne","avatar":"https://static.tigerbbs.com/7eb0f4a742f6158068fdbcdd23f6740c","vip":1,"crmLevel":2,"crmLevelSwitch":0,"idStr":"3579772900389006","authorIdStr":"3579772900389006"},"htmlText":"interesting","listText":"interesting","text":"interesting","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":4,"commentSize":1,"repostSize":0,"link":"https://ttm.financial/post/811034758","repostId":2163304079,"repostType":4,"repost":{"id":"2163304079","pubTimestamp":1630193325,"share":"https://ttm.financial/m/news/2163304079?lang=&edition=fundamental","pubTime":"2021-08-29 07:28","market":"us","language":"en","title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","media":"Reuters","summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","content":"<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.</p>\n<p>As first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.</p>\n<p>Alerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.</p>\n<p>In a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.</p>\n<p>\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.</p>\n<p>\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.</p>\n<p>The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.</p>\n<p>\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.</p>\n<p>Experts at Wiz, founded by four veterans of Azure's in-house security team, agreed.</p>\n<p>\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said <a href=\"https://laohu8.com/S/AONE.U\">one</a> of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.</p>\n<p>Microsoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.</p>\n<p>\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.</p>\n<p>Wiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.</p>\n<p>\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.</p>","source":"yahoofinance","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","is_english":true,"share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","article_id":"2163304079","content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5686723,"gmtCreate":1630276661802,"gmtModify":1663233080949,"authorId":3558608283589593,"author":{"id":3558608283589593,"idStr":"3558608283589593","authorId":3558608283589593,"name":"ND80","avatar":"https://community-static.tradeup.com/news/bb0f12b9cd568049d5ef4fd8cc522646","vip":1,"currentWearingBadge":{"badgeId":"972123088c9646f7b6091ae0662215be-2","templateUuid":"972123088c9646f7b6091ae0662215be","name":"Master Trader","description":"Total number of securities or futures transactions reached 100","bigImgUrl":"https://static.tigerbbs.com/ad22cfbe2d05aa393b18e9226e4b0307","smallImgUrl":"https://static.tigerbbs.com/36702e6ff3ffe46acafee66cc85273ca","grayImgUrl":"https://static.tigerbbs.com/d52eb88fa385cf5abe2616ed63781765","redirectLinkEnabled":0,"hasAllocated":1,"isWearing":1,"stampPosition":0,"hasStamp":0,"allocationCount":1,"allocatedDate":"2024.02.05","exceedPercentage":"80.79%","individualDisplayEnabled":0,"individualDisplaySort":0,"categoryType":1100},"crmLevel":5,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":811034758,"type":1,"supId":0,"prevId":0,"content":"Yeah","text":"Yeah","html":"Yeah"}],"langContent":"EN"},{"id":811030529,"gmtCreate":1630275788661,"gmtModify":1676530252552,"author":{"id":"3586310553293679","authorId":"3586310553293679","name":"SaberNoTooth","avatar":"https://community-static.tradeup.com/news/0e76511083610259e2add7e6e0f7ad6c","vip":1,"hat":"https://static.tigerbbs.com/f84859c65fc2d7681e28f6b8e9b0535a","crmLevel":3,"crmLevelSwitch":0,"idStr":"3586310553293679","authorIdStr":"3586310553293679"},"htmlText":"pls like. thanks","listText":"pls like. thanks","text":"pls like. thanks","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":6,"commentSize":1,"repostSize":0,"link":"https://ttm.financial/post/811030529","repostId":2163304079,"repostType":4,"repost":{"id":"2163304079","pubTimestamp":1630193325,"share":"https://ttm.financial/m/news/2163304079?lang=&edition=fundamental","pubTime":"2021-08-29 07:28","market":"us","language":"en","title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","media":"Reuters","summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","content":"<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.</p>\n<p>As first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.</p>\n<p>Alerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.</p>\n<p>In a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.</p>\n<p>\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.</p>\n<p>\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.</p>\n<p>The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.</p>\n<p>\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.</p>\n<p>Experts at Wiz, founded by four veterans of Azure's in-house security team, agreed.</p>\n<p>\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said <a href=\"https://laohu8.com/S/AONE.U\">one</a> of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.</p>\n<p>Microsoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.</p>\n<p>\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.</p>\n<p>Wiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.</p>\n<p>\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.</p>","source":"yahoofinance","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","is_english":true,"share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","article_id":"2163304079","content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5686700,"gmtCreate":1630276467390,"gmtModify":1663233081927,"authorId":3584063721837527,"author":{"id":3584063721837527,"idStr":"3584063721837527","authorId":3584063721837527,"name":"RK888","avatar":"https://static.tigerbbs.com/c94493ec39af6df82d06fcfa8afb3483","vip":1,"crmLevel":5,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":811030529,"type":1,"supId":0,"prevId":0,"content":"Okay","text":"Okay","html":"Okay"}],"langContent":"EN"},{"id":811097800,"gmtCreate":1630275558200,"gmtModify":1676530252471,"author":{"id":"3586470645934044","authorId":"3586470645934044","name":"ramius75","avatar":"https://community-static.tradeup.com/news/9bf23146914ff935921288dd903ce4fa","vip":1,"crmLevel":5,"crmLevelSwitch":1,"idStr":"3586470645934044","authorIdStr":"3586470645934044"},"htmlText":"every other&nbsp;day… new bugs from MS… ?","listText":"every other&nbsp;day… new bugs from MS… ?","text":"every other day… new bugs from MS… ?","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":4,"commentSize":1,"repostSize":0,"link":"https://ttm.financial/post/811097800","repostId":2163304079,"repostType":4,"repost":{"id":"2163304079","pubTimestamp":1630193325,"share":"https://ttm.financial/m/news/2163304079?lang=&edition=fundamental","pubTime":"2021-08-29 07:28","market":"us","language":"en","title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","media":"Reuters","summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","content":"<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.</p>\n<p>As first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.</p>\n<p>Alerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.</p>\n<p>In a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.</p>\n<p>\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.</p>\n<p>\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.</p>\n<p>The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.</p>\n<p>\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.</p>\n<p>Experts at Wiz, founded by four veterans of Azure's in-house security team, agreed.</p>\n<p>\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said <a href=\"https://laohu8.com/S/AONE.U\">one</a> of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.</p>\n<p>Microsoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.</p>\n<p>\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.</p>\n<p>Wiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.</p>\n<p>\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.</p>","source":"yahoofinance","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","is_english":true,"share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","article_id":"2163304079","content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5686909,"gmtCreate":1630277686041,"gmtModify":1663233081830,"authorId":3582668988155006,"author":{"id":3582668988155006,"idStr":"3582668988155006","authorId":3582668988155006,"name":"MengKeng","avatar":"https://static.tigerbbs.com/daf999525f61ba41d3c13b0ed728eb77","vip":1,"currentWearingBadge":{"badgeId":"972123088c9646f7b6091ae0662215be-1","templateUuid":"972123088c9646f7b6091ae0662215be","name":"Elite Trader","description":"Total number of securities or futures transactions reached 30","bigImgUrl":"https://static.tigerbbs.com/ab0f87127c854ce3191a752d57b46edc","smallImgUrl":"https://static.tigerbbs.com/c9835ce48b8c8743566d344ac7a7ba8c","grayImgUrl":"https://static.tigerbbs.com/76754b53ce7a90019f132c1d2fbc698f","redirectLinkEnabled":0,"hasAllocated":1,"isWearing":1,"stampPosition":0,"hasStamp":0,"allocationCount":1,"allocatedDate":"2021.12.29","exceedPercentage":"60.71%","individualDisplayEnabled":0,"individualDisplaySort":0,"categoryType":1100},"crmLevel":4,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":811097800,"type":1,"supId":0,"prevId":0,"content":"yup, scary indeed.&nbsp; well, SW is written by humans and it will be prone to errors unless there are stringent checks","text":"yup, scary indeed.&nbsp; well, SW is written by humans and it will be prone to errors unless there are stringent checks","html":"yup, scary indeed.&nbsp; well, SW is written by humans and it will be prone to errors unless there are stringent checks"}],"langContent":"EN"},{"id":811092670,"gmtCreate":1630275158690,"gmtModify":1676530252409,"author":{"id":"3582359360248748","authorId":"3582359360248748","name":"ML808","avatar":"https://static.tigerbbs.com/f601c68849ffbac8b7679f40f1471368","vip":1,"hat":"https://static.tigerbbs.com/7b75ce0c34afff716602792a5d0929dd","crmLevel":4,"crmLevelSwitch":0,"idStr":"3582359360248748","authorIdStr":"3582359360248748"},"htmlText":"Serious problem to be address.","listText":"Serious problem to be address.","text":"Serious problem to be address.","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":4,"commentSize":1,"repostSize":0,"link":"https://ttm.financial/post/811092670","repostId":2163304079,"repostType":4,"repost":{"id":"2163304079","pubTimestamp":1630193325,"share":"https://ttm.financial/m/news/2163304079?lang=&edition=fundamental","pubTime":"2021-08-29 07:28","market":"us","language":"en","title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","media":"Reuters","summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","content":"<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.</p>\n<p>As first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.</p>\n<p>Alerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.</p>\n<p>In a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.</p>\n<p>\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.</p>\n<p>\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.</p>\n<p>The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.</p>\n<p>\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.</p>\n<p>Experts at Wiz, founded by four veterans of Azure's in-house security team, agreed.</p>\n<p>\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said <a href=\"https://laohu8.com/S/AONE.U\">one</a> of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.</p>\n<p>Microsoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.</p>\n<p>\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.</p>\n<p>Wiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.</p>\n<p>\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.</p>","source":"yahoofinance","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","is_english":true,"share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","article_id":"2163304079","content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5686557,"gmtCreate":1630275167630,"gmtModify":1663233078250,"authorId":3582359360248748,"author":{"id":3582359360248748,"idStr":"3582359360248748","authorId":3582359360248748,"name":"ML808","avatar":"https://static.tigerbbs.com/f601c68849ffbac8b7679f40f1471368","vip":1,"crmLevel":4,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":811092670,"type":1,"supId":0,"prevId":0,"content":"<u>true</u>","text":"<u>true</u>","html":"<u>true</u>"}],"langContent":"EN"},{"id":811096580,"gmtCreate":1630275097040,"gmtModify":1676530252394,"author":{"id":"4091425725265930","authorId":"4091425725265930","name":"xremy","avatar":"https://static.tigerbbs.com/eed128399f7a5afff5ef683e5991f030","vip":1,"crmLevel":2,"crmLevelSwitch":0,"idStr":"4091425725265930","authorIdStr":"4091425725265930"},"htmlText":"Go.. Up.. Up. Up..&nbsp;","listText":"Go.. Up.. Up. Up..&nbsp;","text":"Go.. Up.. Up. Up..","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":3,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/811096580","repostId":2163304079,"repostType":4,"repost":{"id":"2163304079","pubTimestamp":1630193325,"share":"https://ttm.financial/m/news/2163304079?lang=&edition=fundamental","pubTime":"2021-08-29 07:28","market":"us","language":"en","title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","media":"Reuters","summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","content":"<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.</p>\n<p>As first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.</p>\n<p>Alerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.</p>\n<p>In a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.</p>\n<p>\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.</p>\n<p>\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.</p>\n<p>The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.</p>\n<p>\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.</p>\n<p>Experts at Wiz, founded by four veterans of Azure's in-house security team, agreed.</p>\n<p>\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said <a href=\"https://laohu8.com/S/AONE.U\">one</a> of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.</p>\n<p>Microsoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.</p>\n<p>\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.</p>\n<p>Wiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.</p>\n<p>\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.</p>","source":"yahoofinance","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","is_english":true,"share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","article_id":"2163304079","content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":811004763,"gmtCreate":1630274098852,"gmtModify":1676530252251,"author":{"id":"3579591519090572","authorId":"3579591519090572","name":"El_Nino","avatar":"https://static.tigerbbs.com/6b1b731af69caf76640812930188d9d2","vip":1,"crmLevel":2,"crmLevelSwitch":0,"idStr":"3579591519090572","authorIdStr":"3579591519090572"},"htmlText":"Like n comment pls&nbsp;","listText":"Like n comment pls&nbsp;","text":"Like n comment pls","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":2,"commentSize":1,"repostSize":0,"link":"https://ttm.financial/post/811004763","repostId":2163304079,"repostType":4,"repost":{"id":"2163304079","pubTimestamp":1630193325,"share":"https://ttm.financial/m/news/2163304079?lang=&edition=fundamental","pubTime":"2021-08-29 07:28","market":"us","language":"en","title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","media":"Reuters","summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","content":"<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.</p>\n<p>As first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.</p>\n<p>Alerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.</p>\n<p>In a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.</p>\n<p>\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.</p>\n<p>\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.</p>\n<p>The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.</p>\n<p>\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.</p>\n<p>Experts at Wiz, founded by four veterans of Azure's in-house security team, agreed.</p>\n<p>\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said <a href=\"https://laohu8.com/S/AONE.U\">one</a> of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.</p>\n<p>Microsoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.</p>\n<p>\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.</p>\n<p>Wiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.</p>\n<p>\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.</p>","source":"yahoofinance","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","is_english":true,"share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","article_id":"2163304079","content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5686552,"gmtCreate":1630275111087,"gmtModify":1663233079133,"authorId":3582350348015234,"author":{"id":3582350348015234,"idStr":"3582350348015234","authorId":3582350348015234,"name":"Ag1718","avatar":"https://community-static.tradeup.com/news/7b99db6dd9dd4eaa84bd8baf04aad0b9","vip":1,"crmLevel":1,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":811004763,"type":1,"supId":0,"prevId":0,"content":"Like","text":"Like","html":"Like"}],"langContent":"EN"},{"id":811001309,"gmtCreate":1630272627901,"gmtModify":1676530252122,"author":{"id":"3581981992184294","authorId":"3581981992184294","name":"小虎一只","avatar":"https://static.laohu8.com/default-avatar.jpg","vip":1,"crmLevel":2,"crmLevelSwitch":0,"idStr":"3581981992184294","authorIdStr":"3581981992184294"},"htmlText":"一","listText":"一","text":"一","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":2,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/811001309","repostId":2163304079,"repostType":4,"repost":{"id":"2163304079","pubTimestamp":1630193325,"share":"https://ttm.financial/m/news/2163304079?lang=&edition=fundamental","pubTime":"2021-08-29 07:28","market":"us","language":"en","title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","media":"Reuters","summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","content":"<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.</p>\n<p>As first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.</p>\n<p>Alerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.</p>\n<p>In a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.</p>\n<p>\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.</p>\n<p>\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.</p>\n<p>The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.</p>\n<p>\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.</p>\n<p>Experts at Wiz, founded by four veterans of Azure's in-house security team, agreed.</p>\n<p>\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said <a href=\"https://laohu8.com/S/AONE.U\">one</a> of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.</p>\n<p>Microsoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.</p>\n<p>\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.</p>\n<p>Wiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.</p>\n<p>\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.</p>","source":"yahoofinance","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","is_english":true,"share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","article_id":"2163304079","content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"CN"},{"id":811001991,"gmtCreate":1630272606413,"gmtModify":1676530252114,"author":{"id":"3581981992184294","authorId":"3581981992184294","name":"小虎一只","avatar":"https://static.laohu8.com/default-avatar.jpg","vip":1,"crmLevel":2,"crmLevelSwitch":0,"idStr":"3581981992184294","authorIdStr":"3581981992184294"},"htmlText":"一","listText":"一","text":"一","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":3,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/811001991","repostId":2163304079,"repostType":4,"repost":{"id":"2163304079","pubTimestamp":1630193325,"share":"https://ttm.financial/m/news/2163304079?lang=&edition=fundamental","pubTime":"2021-08-29 07:28","market":"us","language":"en","title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","media":"Reuters","summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","content":"<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.</p>\n<p>As first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.</p>\n<p>Alerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.</p>\n<p>In a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.</p>\n<p>\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.</p>\n<p>\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.</p>\n<p>The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.</p>\n<p>\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.</p>\n<p>Experts at Wiz, founded by four veterans of Azure's in-house security team, agreed.</p>\n<p>\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said <a href=\"https://laohu8.com/S/AONE.U\">one</a> of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.</p>\n<p>Microsoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.</p>\n<p>\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.</p>\n<p>Wiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.</p>\n<p>\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.</p>","source":"yahoofinance","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","is_english":true,"share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","article_id":"2163304079","content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"CN"},{"id":811001060,"gmtCreate":1630272588550,"gmtModify":1676530252122,"author":{"id":"3581487017513023","authorId":"3581487017513023","name":"J90","avatar":"https://static.tigerbbs.com/59b9bd5153d367d5ee88324bdf6c6003","vip":1,"crmLevel":2,"crmLevelSwitch":0,"idStr":"3581487017513023","authorIdStr":"3581487017513023"},"htmlText":"Like me","listText":"Like me","text":"Like me","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":3,"commentSize":1,"repostSize":0,"link":"https://ttm.financial/post/811001060","repostId":2163304079,"repostType":4,"repost":{"id":"2163304079","pubTimestamp":1630193325,"share":"https://ttm.financial/m/news/2163304079?lang=&edition=fundamental","pubTime":"2021-08-29 07:28","market":"us","language":"en","title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","media":"Reuters","summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","content":"<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.</p>\n<p>As first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.</p>\n<p>Alerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.</p>\n<p>In a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.</p>\n<p>\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.</p>\n<p>\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.</p>\n<p>The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.</p>\n<p>\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.</p>\n<p>Experts at Wiz, founded by four veterans of Azure's in-house security team, agreed.</p>\n<p>\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said <a href=\"https://laohu8.com/S/AONE.U\">one</a> of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.</p>\n<p>Microsoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.</p>\n<p>\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.</p>\n<p>Wiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.</p>\n<p>\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.</p>","source":"yahoofinance","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","is_english":true,"share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","article_id":"2163304079","content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5686390,"gmtCreate":1630272637398,"gmtModify":1663233078437,"authorId":3581981992184294,"author":{"id":3581981992184294,"idStr":"3581981992184294","authorId":3581981992184294,"name":"小虎一只","avatar":"https://static.laohu8.com/default-avatar.jpg","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":811001060,"type":1,"supId":0,"prevId":0,"content":"<u>上</u>","text":"<u>上</u>","html":"<u>上</u>"}],"langContent":"EN"},{"id":811003922,"gmtCreate":1630272194366,"gmtModify":1676530252106,"author":{"id":"3582021616632458","authorId":"3582021616632458","name":"Xue91","avatar":"https://static.tigerbbs.com/4d9f9012cc2ef597a6ee7470e2cfb3e1","vip":1,"crmLevel":2,"crmLevelSwitch":0,"idStr":"3582021616632458","authorIdStr":"3582021616632458"},"htmlText":"Ohhhh","listText":"Ohhhh","text":"Ohhhh","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":2,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/811003922","repostId":2163304079,"repostType":4,"repost":{"id":"2163304079","pubTimestamp":1630193325,"share":"https://ttm.financial/m/news/2163304079?lang=&edition=fundamental","pubTime":"2021-08-29 07:28","market":"us","language":"en","title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","media":"Reuters","summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","content":"<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.</p>\n<p>As first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.</p>\n<p>Alerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.</p>\n<p>In a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.</p>\n<p>\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.</p>\n<p>\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.</p>\n<p>The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.</p>\n<p>\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.</p>\n<p>Experts at Wiz, founded by four veterans of Azure's in-house security team, agreed.</p>\n<p>\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said <a href=\"https://laohu8.com/S/AONE.U\">one</a> of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.</p>\n<p>Microsoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.</p>\n<p>\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.</p>\n<p>Wiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.</p>\n<p>\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.</p>","source":"yahoofinance","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","is_english":true,"share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","article_id":"2163304079","content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":813771016,"gmtCreate":1630260600735,"gmtModify":1676530251871,"author":{"id":"4087537231786360","authorId":"4087537231786360","name":"土金水木火","avatar":"https://static.tigerbbs.com/b569dff568eac68113202875c896b710","vip":1,"crmLevel":2,"crmLevelSwitch":0,"idStr":"4087537231786360","authorIdStr":"4087537231786360"},"htmlText":"Ok","listText":"Ok","text":"Ok","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":2,"commentSize":2,"repostSize":0,"link":"https://ttm.financial/post/813771016","repostId":2163304079,"repostType":4,"repost":{"id":"2163304079","pubTimestamp":1630193325,"share":"https://ttm.financial/m/news/2163304079?lang=&edition=fundamental","pubTime":"2021-08-29 07:28","market":"us","language":"en","title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","media":"Reuters","summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","content":"<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.</p>\n<p>As first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.</p>\n<p>Alerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.</p>\n<p>In a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.</p>\n<p>\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.</p>\n<p>\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.</p>\n<p>The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.</p>\n<p>\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.</p>\n<p>Experts at Wiz, founded by four veterans of Azure's in-house security team, agreed.</p>\n<p>\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said <a href=\"https://laohu8.com/S/AONE.U\">one</a> of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.</p>\n<p>Microsoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.</p>\n<p>\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.</p>\n<p>Wiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.</p>\n<p>\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.</p>","source":"yahoofinance","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","is_english":true,"share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","article_id":"2163304079","content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5686375,"gmtCreate":1630272200316,"gmtModify":1663233079641,"authorId":3582021616632458,"author":{"id":3582021616632458,"idStr":"3582021616632458","authorId":3582021616632458,"name":"Xue91","avatar":"https://static.tigerbbs.com/4d9f9012cc2ef597a6ee7470e2cfb3e1","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":813771016,"type":1,"supId":0,"prevId":0,"content":"Yes","text":"Yes","html":"Yes"},{"id":5686389,"gmtCreate":1630272601756,"gmtModify":1663233077942,"authorId":3581487017513023,"author":{"id":3581487017513023,"idStr":"3581487017513023","authorId":3581487017513023,"name":"J90","avatar":"https://static.tigerbbs.com/59b9bd5153d367d5ee88324bdf6c6003","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":813771016,"type":1,"supId":0,"prevId":0,"content":"Ok","text":"Ok","html":"Ok"}],"langContent":"EN"},{"id":813773502,"gmtCreate":1630260073406,"gmtModify":1676530251855,"author":{"id":"3582248787663478","authorId":"3582248787663478","name":"kcdc86","avatar":"https://community-static.tradeup.com/news/cc68f682561b677ba318c1b85eb97dee","vip":1,"crmLevel":2,"crmLevelSwitch":1,"idStr":"3582248787663478","authorIdStr":"3582248787663478"},"htmlText":"Like pls.. Thanks..&nbsp;","listText":"Like pls.. Thanks..&nbsp;","text":"Like pls.. Thanks..","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":3,"commentSize":1,"repostSize":0,"link":"https://ttm.financial/post/813773502","repostId":2163304079,"repostType":4,"repost":{"id":"2163304079","pubTimestamp":1630193325,"share":"https://ttm.financial/m/news/2163304079?lang=&edition=fundamental","pubTime":"2021-08-29 07:28","market":"us","language":"en","title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","media":"Reuters","summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","content":"<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.</p>\n<p>As first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.</p>\n<p>Alerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.</p>\n<p>In a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.</p>\n<p>\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.</p>\n<p>\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.</p>\n<p>The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.</p>\n<p>\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.</p>\n<p>Experts at Wiz, founded by four veterans of Azure's in-house security team, agreed.</p>\n<p>\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said <a href=\"https://laohu8.com/S/AONE.U\">one</a> of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.</p>\n<p>Microsoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.</p>\n<p>\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.</p>\n<p>Wiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.</p>\n<p>\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.</p>","source":"yahoofinance","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","is_english":true,"share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","article_id":"2163304079","content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5686249,"gmtCreate":1630260593896,"gmtModify":1631892382907,"authorId":4087537231786360,"author":{"id":4087537231786360,"idStr":"4087537231786360","authorId":4087537231786360,"name":"土金水木火","avatar":"https://static.tigerbbs.com/b569dff568eac68113202875c896b710","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":813773502,"type":1,"supId":0,"prevId":0,"content":"Done","text":"Done","html":"Done"}],"langContent":"EN"},{"id":813750816,"gmtCreate":1630252105835,"gmtModify":1676530251287,"author":{"id":"3582285682937778","authorId":"3582285682937778","name":"neoh","avatar":"https://static.laohu8.com/default-avatar.jpg","vip":1,"crmLevel":2,"crmLevelSwitch":0,"idStr":"3582285682937778","authorIdStr":"3582285682937778"},"htmlText":"Like","listText":"Like","text":"Like","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":2,"commentSize":3,"repostSize":0,"link":"https://ttm.financial/post/813750816","repostId":2163304079,"repostType":4,"repost":{"id":"2163304079","pubTimestamp":1630193325,"share":"https://ttm.financial/m/news/2163304079?lang=&edition=fundamental","pubTime":"2021-08-29 07:28","market":"us","language":"en","title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","media":"Reuters","summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","content":"<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.</p>\n<p>As first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.</p>\n<p>Alerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.</p>\n<p>In a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.</p>\n<p>\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.</p>\n<p>\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.</p>\n<p>The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.</p>\n<p>\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.</p>\n<p>Experts at Wiz, founded by four veterans of Azure's in-house security team, agreed.</p>\n<p>\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said <a href=\"https://laohu8.com/S/AONE.U\">one</a> of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.</p>\n<p>Microsoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.</p>\n<p>\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.</p>\n<p>Wiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.</p>\n<p>\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.</p>","source":"yahoofinance","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","is_english":true,"share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","article_id":"2163304079","content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5751221,"gmtCreate":1630739274391,"gmtModify":1663233377340,"authorId":3582285682937778,"author":{"id":3582285682937778,"idStr":"3582285682937778","authorId":3582285682937778,"name":"neoh","avatar":"https://static.laohu8.com/default-avatar.jpg","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":813750816,"type":1,"supId":5685964,"prevId":0,"content":"<u>thanks</u>","text":"<u>thanks</u>","html":"<u>thanks</u>"},{"id":5696567,"gmtCreate":1630335880273,"gmtModify":1663233127931,"authorId":3582285682937778,"author":{"id":3582285682937778,"idStr":"3582285682937778","authorId":3582285682937778,"name":"neoh","avatar":"https://static.laohu8.com/default-avatar.jpg","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":813750816,"type":1,"supId":5685964,"prevId":0,"content":"<u>thanks</u>","text":"<u>thanks</u>","html":"<u>thanks</u>"},{"id":5685964,"gmtCreate":1630252701692,"gmtModify":1631885030386,"authorId":3582059874598092,"author":{"id":3582059874598092,"idStr":"3582059874598092","authorId":3582059874598092,"name":"Junpani","avatar":"https://static.laohu8.com/default-avatar.jpg","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":813750816,"type":1,"supId":0,"prevId":0,"content":"<u>comment</u>","text":"<u>comment</u>","html":"<u>comment</u>"}],"langContent":"EN"},{"id":813767444,"gmtCreate":1630250532688,"gmtModify":1676530250960,"author":{"id":"3579758808989513","authorId":"3579758808989513","name":"ACCY","avatar":"https://static.tigerbbs.com/a44626552831eb06aa01cf85dcaf7422","vip":1,"crmLevel":1,"crmLevelSwitch":0,"idStr":"3579758808989513","authorIdStr":"3579758808989513"},"htmlText":"Goodness ?","listText":"Goodness ?","text":"Goodness ?","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":4,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/813767444","repostId":2163304079,"repostType":4,"repost":{"id":"2163304079","pubTimestamp":1630193325,"share":"https://ttm.financial/m/news/2163304079?lang=&edition=fundamental","pubTime":"2021-08-29 07:28","market":"us","language":"en","title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","media":"Reuters","summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","content":"<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.</p>\n<p>As first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.</p>\n<p>Alerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.</p>\n<p>In a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.</p>\n<p>\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.</p>\n<p>\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.</p>\n<p>The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.</p>\n<p>\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.</p>\n<p>Experts at Wiz, founded by four veterans of Azure's in-house security team, agreed.</p>\n<p>\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said <a href=\"https://laohu8.com/S/AONE.U\">one</a> of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.</p>\n<p>Microsoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.</p>\n<p>\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.</p>\n<p>Wiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.</p>\n<p>\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.</p>","source":"yahoofinance","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","is_english":true,"share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","article_id":"2163304079","content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":813787282,"gmtCreate":1630248908646,"gmtModify":1676530250743,"author":{"id":"3584019054184037","authorId":"3584019054184037","name":"CLOUD1127","avatar":"https://community-static.tradeup.com/news/2e12d8ce93dfc3e452c295a0cefaebc9","vip":1,"crmLevel":5,"crmLevelSwitch":0,"idStr":"3584019054184037","authorIdStr":"3584019054184037"},"htmlText":"ok","listText":"ok","text":"ok","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":4,"commentSize":2,"repostSize":0,"link":"https://ttm.financial/post/813787282","repostId":2163304079,"repostType":4,"repost":{"id":"2163304079","pubTimestamp":1630193325,"share":"https://ttm.financial/m/news/2163304079?lang=&edition=fundamental","pubTime":"2021-08-29 07:28","market":"us","language":"en","title":"Researchers, cybersecurity agency urge action by Microsoft cloud database users","url":"https://stock-news.laohu8.com/highlight/detail?id=2163304079","media":"Reuters","summary":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp","content":"<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.</p>\n<p>As first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.</p>\n<p>Alerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.</p>\n<p>In a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.</p>\n<p>\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.</p>\n<p>\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.</p>\n<p>The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.</p>\n<p>\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.</p>\n<p>Experts at Wiz, founded by four veterans of Azure's in-house security team, agreed.</p>\n<p>\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said <a href=\"https://laohu8.com/S/AONE.U\">one</a> of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.</p>\n<p>Microsoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.</p>\n<p>\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.</p>\n<p>Wiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.</p>\n<p>\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.</p>","source":"yahoofinance","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Researchers, cybersecurity agency urge action by Microsoft cloud database users</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nResearchers, cybersecurity agency urge action by Microsoft cloud database users\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-08-29 07:28 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html><strong>Reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just ...</p>\n\n<a href=\"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://finance.yahoo.com/news/researchers-cybersecurity-agency-urge-action-232845273.html","is_english":true,"share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","article_id":"2163304079","content_text":"(Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.\nAs first reported by Reuters https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26, researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records.\nAlerted by Wiz, Microsoft rapidly fixed the configuration mistake that would have made it easy for any Cosmos user to get into other customers' databases, then notified some users Thursday to change their keys.\nIn a blog post Friday, Microsoft said it warned customers which had set up Cosmos access during the weeklong research period. It found no evidence that any attackers had used the same flaw to get into customer data, it noted.\n\"Our investigation shows no unauthorized access other than the researcher activity,\" Microsoft wrote. \"Notifications have been sent to all customers that could be potentially affected due to researcher activity,\" it said, perhaps referring to the chance that the technique had leaked from Wiz.\n\"Though no customer data was accessed, it is recommended you regenerate your primary read-write keys,\" it said.\nThe U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency used stronger language in a bulletin Friday, making clear it was speaking not just to those notified.\n\"CISA strongly encourages Azure Cosmos DB customers to roll and regenerate their certificate key,\" the agency said https://us-cert.cisa.gov/ncas/current-activity/2021/08/27/microsoft-azure-cosmos-db-guidance.\nExperts at Wiz, founded by four veterans of Azure's in-house security team, agreed.\n\"In my estimation, it's really hard for them, if not impossible, to completely rule out that someone used this before,\" said one of the four, Wiz Chief Technology Officer Ami Luttwak. At Microsoft he developed tools for logging cloud security incidents.\nMicrosoft did not give a direct answer when asked if it had comprehensive logs for the two years when the Jupyter Notebook feature was misconfigured, or had used another way to rule out access abuse.\n\"We expanded our search beyond the researcher's activities to look for all possible activity for current and similar events in the past,\" said spokesman Ross Richendrfer, declining to address other questions.\nWiz said Microsoft had worked closely with it on the research but had declined to say how it could be sure earlier customers were safe.\n\"It's terrifying. I really hope than no one besides us found this bug,\" said one of the lead researchers on the project at Wiz, Sagi Tzadik.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5685644,"gmtCreate":1630249294317,"gmtModify":1663233076948,"authorId":3546519093286207,"author":{"id":3546519093286207,"idStr":"3546519093286207","authorId":3546519093286207,"name":"cuteypie","avatar":"https://static.tigerbbs.com/324f57345522368552a82de3cf71ed5f","vip":1,"crmLevel":6,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":813787282,"type":1,"supId":0,"prevId":0,"content":"OK","text":"OK","html":"OK"},{"id":5685788,"gmtCreate":1630250667183,"gmtModify":1663233076946,"authorId":3581584136411536,"author":{"id":3581584136411536,"idStr":"3581584136411536","authorId":3581584136411536,"name":"JHFG","avatar":"https://static.tigerbbs.com/e048fb469b216f96902bba2f89b85c19","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":813787282,"type":1,"supId":5685644,"prevId":0,"content":"k","text":"k","html":"k"}],"langContent":"EN"}],"hasMoreComments":true,"newsSizeData":{"likeSize":1357,"commentSize":79,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false}}