Wiz Research details CosmosEscape, a critical vulnerability in Azure Cosmos DB that granted full read/write access to every database. Now fully remediated.

@badthingsdaily@infosec.exchange After having paid ransom for the decryptor out of pure desperation you find out, that there had been an encryption just an hour before the now-paid ransomware group by a different group. Which wants money for their decryptor, of course ...

We discovered a remote code execution vulnerability in Kiro, AWS's agentic IDE. By planting hidden instructions in a web page Kiro reads, an attacker can make it rewrite its own MCP configuration file (~/.kiro/settings/mcp.json) and launch malicious code, bypassing the user-approval boundary meant to stop risky actions. A routine request like "summarize this page" becomes silent code execution on the developer's machine. AWS has patched the flaw, so update Kiro to the latest version.

## Impact An authenticated user with permission to create or modify workflows could abuse crafted expressions using arrow functions to bypass the expression sandbox, triggering unintended system c...

We chained two memory-safety flaws in Oj, a native Ruby JSON parser used by GitLab's notebook diff renderer, into remote code execution in a Puma worker. The path begins with an attacker-controlled Jupyter notebook and crosses GitLab, ipynbdiff, CRuby, and jemalloc before reaching function-pointer control.

Turning fastjson 1.2.83 into remote code execution with AutoType off and no gadget on the classpath: an SSRF inside checkAutoType, the @JSONType bypass, and a /proc/self/fd trick that carries it from JDK 8 to 25. By FearsOff.