ChaosDB: How we hacked thousands of Azure customers’ databases

Wiz security researchers disclosed “ChaosDB,” a critical flaw in Azure Cosmos DB’s Jupyter Notebook feature that allowed trivial exploitation to harvest customers' long-lived primary keys and gain full read/write/delete access to databases across thousands of Cosmos DB accounts (including large enterprises). Microsoft quickly disabled the vulnerable notebook capability and notified affected customers to rotate keys, but the issue may have been exploitable for months and could have exposed large-scale sensitive data.