"Secret" Agent Exposes Azure Customers to Unauthorized Code Execution

Re:"Secret" Agent Exposes Azure Customers to Unauthorized Co... by flyinglizard on Tuesday September 14, 2021 @09:33PM (#28534081)

This is the second Azure disclosure from the guys at Wiz, following the one with Cosmos DB few weeks ago. Now, it’s much more interesting when you take into account that Wiz was founded by the guys who sold a cyber security company, Adallom, to Microsoft and then served in senior roles around Microsoft cloud security post acquisition. Assaf Rappaport, Wiz CEO, served as fhe GM of the Cloud Security Group at Microsoft for five years [0].

I wonder what the people at Microsoft are thinking of this situation.

[0] https://www.linkedin.com/in/assafrappaport

[ Parent | on HN ]

Re:"Secret" Agent Exposes Azure Customers to Unauthorized Co... by jcims on Tuesday September 14, 2021 @09:59PM (#28534306)

I'm sure its awkward but they appear to be an equal opportunity reporter - https://www.wiz.io/blog/black-hat-2021-aws-cross-account-vul...

Their product is pretty interesting. I did a demo a while back and their approach of building a large graph and doing a good amount of reachability (network and entitelement) leads to some useful signal. It's not entirely novel, JupiterOne has been doing something in the same vein for years now but it seems to work well. Still feels a bit rough around the edges but i thought it was interesting and could work well in situations where simple checkbox-style config analysis falls short.

[ Parent | on HN ]

Re:"Secret" Agent Exposes Azure Customers to Unauthorized Co... by keiko-z on Wednesday September 15, 2021 @07:58AM (#28537947)

I was able to leverage JupiterOne to identify the misconfiguration mentioned in the Wiz article across all my AWS accounts in a single query. Pretty nifty.

They shared that query and a bunch more in this blog: https://try.jupiterone.com/my-bucket-my-data-or-is-it

[ Parent | on HN ]

Re:"Secret" Agent Exposes Azure Customers to Unauthorized Co... by kerng on Tuesday September 14, 2021 @09:56PM (#28534277)

Interesting. Would be curious to know what parts they worked at. GM seems high enough to know about "areas to look at".

Still doesn't excuse having such bugs in the first place though.

[ Parent | on HN ]

Re:"Secret" Agent Exposes Azure Customers to Unauthorized Co... by paulryanrogers on Wednesday September 15, 2021 @12:16AM (#28535222)

What's the implication? That faults were included or neglected to be sussed out by their next company?

[ Parent | on HN ]

Re:"Secret" Agent Exposes Azure Customers to Unauthorized Co... by flyinglizard on Wednesday September 15, 2021 @08:23AM (#28538154)

Absolutely not. But it’s still kinda weird. Like Facebooks CISO leaving their post to found a company which promotes itself with Facebook CVEs. To quote Matt Levine, “I don’t know”.

[ Parent | on HN ]

Re:"Secret" Agent Exposes Azure Customers to Unauthorized Co... by lloydgrossman on Tuesday September 14, 2021 @10:00PM (#28534309)

> Now, it’s much more interesting when you take into account that Wiz was founded by the guys who sold a cyber security company

security people sell security company and create a security company. color me shocked.

[ Parent | on HN ]

Re:"Secret" Agent Exposes Azure Customers to Unauthorized Co... by yellow_lead on Wednesday September 15, 2021 @12:17AM (#28535227)

Nice out of context quote.

[ Parent | on HN ]