A major security exploit that let researchers change Bing search results was revealed this week.
The Watch Bosomy Sisters Who Are Good at Stripping Onlinevulnerability was discovered in January by cybersecurity research company Wiz and reported to the Microsoft Security Response Center (MSRC).
In a Twitter thread, Wiz researcher Hillai Ben-Sasson explained how he was able to hack into Bing's content management system (CMS). By logging into Microsoft's cloud computing platform Azure, he discovered that he could grant all users access to internal Microsoft apps. He then accessed a database of Bing's search results. From there, Ben-Sasson figured out that he could actually modify what showed up in the results.
Wiz researchers also discovered that Bing was vulnerable to a Cross-Site Scripting (XSS) attack and discovered they had access to sensitive Office 365 data including Outlook emails, Calendar information, and Teams messages. MSRC detailed security updates and shared recommendations for Azure AD admins and developers in its blog post.
SEE ALSO: Protect your privacy with the best free VPNThe purpose of the researchers' experiment was to show that it was possible and share its findings with Microsoft. But it shows how malicious hackers could have wreaked havoc for Bing.
"A malicious actor with the same access could’ve hijacked the most popular search results with the same payload and leak sensitive data from millions of users," said the Wiz blog post. Luckily it was caught before any major damage was done.
This Tweet is currently unavailable. It might be loading or has been removed.
Microsoft confirmed that it has been fixed as of March 29. Wiz received a $40,000 "bug bounty" for reporting the vulnerability, which it it plans to donate to an unspecified recipient.
Topics Cybersecurity Microsoft
Google Pixel Buds Pro 2: $40 off at Amazon
After 11 years, the feud between Chili's and 'The Office's Pam Beesly is now over
Man finds deeply disturbing mystery item inside pot of jam
Mum slams Trump on Facebook for calling daughter's murder 'terrorism'
Best portable power station deal: Save $179.01 on the EcoFlow River 2 Max
Make 2017 the year you finally budget for charity
Google figured out how to turn pixelated images into high
P!nk showed off all the weight she hasn't loss since giving birth and it's incredible
NYT Strands hints, answers for May 18
Hacked Amazon Dash Button sends $5 to the ACLU whenever life demands it
Bomb Envy
You hate data journalism because you're reading it wrong
Christie Brinkley appears to defy gravity in 'Sports Illustrated' swimsuit issue
CNN and Kellyanne Conway face off in spectacularly fiery interview
Hidden Siri Commands and Unusual Responses
Inside Apple Music's plan to take over the Indian market
'Jane the Virgin' showrunner promises Jane will 'rise up' after tragic twist
You hate data journalism because you're reading it wrong
The Anatomy of Liberal Melancholy
Put your undies back on. New data reveals sexting isn't so great after all.
Starbucks will chuck plastic straws in hopes of reducing ocean wasteTrump’s SCOTUS pick, Brett Kavanaugh, is very bad for net neutralityUmtiti's sassy postThe iPhone's USB Restricted Mode is painfully easy to hackLando is back in Star Wars Episode IX, report saysYes, Beyoncé’s mom also listens to Beyoncé when she has a tough day'Top Gear' season opener fails to fire on all cylinders'Handmaid's Tale' wine is a fitting beverage for our current hellscapeWe are pleased to report John Legend and Chrissy Teigen are big fans of 'The Office'Facebook given maximum fine by UK watchdog over Cambridge Analytica fiascoCreator of 'Sorry to Bother You' Boots Riley explains insane ending'Top Gear' season opener fails to fire on all cylindersAlphabet, Google's parent, moonshots drone and rural internet projectsPeople in the U.S. and Canada can now order a Tesla Model 3 without a reservationMobile ad blocking doubled worldwide last yearWatch Ben Affleck predict Spotify and Netflix streaming back in 2003Dan Rather on Trump's media bashing: 'I felt a shudder down my spine'Creator of 'Sorry to Bother You' Boots Riley explains insane endingTaylor Swift and Calvin Harris' love story is over? Baby, just say no!Josh Brolin recreates 'Avengers: Infinity War' ending for pending largest Reddit ban ever Hinge rolls out in Here are the 15 best tweets of the week TikTokGPT: ChatGPT's mission to make someone TikTok famous in 30 days How to masturbate while in close quarters, according to a sex expert Bumble users are raring to meet in person again as some states ease stay Elon Musk said the Twitter Files are basically dead Elon Musk just shut down automation for important public safety accounts Coachella is coming to Fortnite in a big way Bored zoo penguins took a field trip to their local art museum Everyone's dreaming of walking down the aisle after quarantine in this meme IKEA made blanket fort instructions for kids 'Wordle' today: Here's the answer, hints for April 16 Restaurant uses greenhouses so diners can socially distance while eating out Intercom drops Twitter support citing Musk's new exorbitant API pricing The internet got a glimpse of Dr. Fauci's home office and they want more 'Wordle' today: Here's the answer, hints for April 13 The first quarantine concert is a preview of music's weird future 'Beef' is full of '90s and '00s gems. Why does the soundtrack work so well? 'Barry' Season 4 review: A ruthless end to a brilliant show 'Wordle' today: Here's the answer, hints for April 15
2.2007s , 8200.1171875 kb
Copyright © 2025 Powered by 【Watch Bosomy Sisters Who Are Good at Stripping Online】,Miracle Information Network