Wiz says a now-patched flaw in Azure CosmosDB would have let a hacker remotely compromise any of its users; Microsoft has seen "no evidence of customer impact" (Raphael Satter/Reuters)

Security firm Wiz discovered a critical vulnerability in Microsoft Azure CosmosDB that could have allowed attackers to remotely compromise any customer using the service, though Microsoft reports no evidence of active exploitation. This incident underscores the significant security risks associated with cloud database services and the importance of rapid vulnerability patching in shared infrastructure environments. IT organizations relying on Azure CosmosDB must reassess their cloud security posture and vendor patch management processes to mitigate similar threats.