Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-07-31 · high
Microsoft shipped a hotfix within two days but didn't finish rebuilding the vulnerable service until July 2026.
Why now: Wiz published the technical write-up July 30, capping a disclosure that ran from November 2025's report to July 2026's rebuild.
Wiz broke out of a sandboxed database engine inside Azure Cosmos DB and reached the master key for every tenant, the company disclosed July 30.
That key, held by Cosmos DB's Gateway service, unlocks primary keys for any account in any tenant or region. It also opens a Config Store listing every account on the platform.
Entra ID, Teams and Copilot all store data in Cosmos DB, so the exposure reached past Azure customers into Microsoft's own services.
The path in ran through Gremlin, Cosmos DB's graph query engine. A chain of .NET reflection tricks broke that sandbox and ran code on the DB Gateway, the service holding the master key.
Microsoft got the report on November 20, 2025, and shipped a hotfix two days later. The real fix, rebuilding how DB Gateway isolates that key, didn't finish until July 2026. Wiz's writeup doesn't say why the rebuild took that long.
Wiz credits an early version of Atlas, its AI vulnerability researcher, with helping find the bug.
Two days for the patch, eight months for the rebuild. That gap points to the real flaw: one master key behind a single sandboxed engine for every tenant. If Cosmos DB ships another sandbox escape, watch whether Microsoft contains it to one tenant this time.
Each link below shares sources, entities, or timing with this story.
microsoft/skill-recorder (2,233 stars since July 29, pushing daily) is an Electron app that records clicks, window switches and optional narration, then uses the GitHub Copilot CLI to reconstruct the session as an intent plus ordered steps. The design choice that matters: gene...
An open-weight Chinese frontier model is now a dropdown option in Microsoft's coding product. That happened before anyone finished characterizing what the model does. GitHub's changelog dated August 6 makes Kimi K3 generally available across Copilot Pro, Pro+, Max, Business an...
Microsoft's update ships a new Agent (Preview) in Copilot Chat built on the SDK powering Copilot CLI, explicitly so behavior stays consistent across CLI, the GitHub app, VS Code and Visual Studio (Visual Studio Blog). It ships curated .NET and Azure skills you enable selective...
Anthropic invented a file convention. It's now shipping GA inside a competitor's product. Nobody wrote a spec, nobody held a standards meeting, it just happened. On July 29, GitHub made agent skills and MCP server support generally available in Copilot code review for all Pro,...
Here's the counterweight to the PMF story. Microsoft began revoking internal Claude Code licenses for most employees on May 14 with a June 30 deadline. The Experiences and Devices division, the team behind Windows, Microsoft 365, Outlook, Teams, and Surface, is moving engineer...
PR #1218 in a Snowflake repository replaced a safe pattern with an unsafe one. The old code used env: plus jq --arg to pass an issue title into a shell step. The new code interpolated github.event.issue.title directly into a run: block. That's the textbook GitHub Actions scrip...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.