ClosedPatched
Microsoft AI researchers exposed 38TB via an over-permissive Azure SAS link
Microsoft Azure Storage (SAS token in a GitHub repo)
A public GitHub repo of Microsoft AI training models shared an Azure Storage SAS token with full-control permissions on a whole storage account. It exposed 38TB of internal data, including workstation backups, secrets and Teams messages. Wiz found and reported it.
Why this severity: Cloud storage exposure of internal data and secrets
- Started
- Jun 22, 2023
- Closed
- Sep 18, 2023
Affected
Not published yet
Fixed in
No fixed release yet
Updates by day3
Advisories1
News & write-ups1
Notes & caveats
The link had been public since 2020 per Wiz; startedAt is the report date.
Get an email when a new major security incident drops. No spam, unsubscribe any time.
