A serious bug in Microsoft’s Azure platform could have let hackers switch up search results and steal the files of millions of users, a security firm has found.
A security researcher was recently able to change the top results in Microsoft’s Bing search engine and access any user’s private files, potentially putting millions of users at risk — and all it took was logging into an unsecured web page.
Related Videos The #BingBang - a Bing.com vulnerability discovered by Wiz Research Dubbed BingBang by the research group, the vulnerability centered on Microsoft’s Azure Active Directory, which is used by enterprises to manage user identities and access to apps. Unfortunately, if an app is misconfigured, any Azure user in the world can log into it without the proper credentials.
After exploiting the flaw to log into the Bing Trivia app, the Wiz team found a content management system tied to Bing.com that was controlling the search engine’s live results. With a touch of humor, they then altered one of the entries, changing the top result for ‘best soundtracks’ from the Dune score to that from the 1995 movie Hackers.
Stealing private files and emails What’s more, the researchers were able to add a harmless cross-site scripting payload into Bing while they were logged in. This was able to run as expected, without interference. After reporting the issue to Microsoft, the researchers tried modifying this XSS payload to see what was possible.
Australia Latest News, Australia Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Asus ROG Zephyrus M16 vs. Lenovo Legion Pro 7i | Digital TrendsThe Asus ROG Zephyrus M16 offers a superior display, while the Lenovo Legion Pro 7i trumps it in CPU performance, Which is the better gaming laptop?
Read more »
These 5 things will make the Apple Watch Ultra 2 amazing | Digital TrendsThe Apple Watch Ultra is superb, and to improve on it Apple will have to work hard. This is what we think needs to change for the AppleWatch Ultra 2.
Read more »
Goodbye Volcano High's high school dino drama has me charmed | Digital TrendsWe checked out Goodbye Volcano High at PAX East, and we're already curious find out how the dinosaur high school drama ends.
Read more »
The Mageseeker blends League of Legends lore with Hades' action | Digital TrendsThe Mageseeker: A League of Legends Story impressed us at this year's PAX with its Hades-quality combat.
Read more »
Wearing a fitness tracker could help you detect COVID faster | Digital TrendsResearch into COVID19 by Oura shows the OuraRing smart ring's sensors collect data that can warn when you're getting sick.
Read more »
My iPhone 14 Pro is great, but one thing is driving me crazy | Digital TrendsApple's iPhone 14 Pro is an incredible phone with ample power and features in a reasonably-sized body. But there's one thing I can't stand about it.
Read more »