A major security exploit that let researchers change Bing search results was revealed this week.
The Six Swedish Girls at a Pump (High Test Girlsvulnerability was discovered in January by cybersecurity research company Wiz and reported to the Microsoft Security Response Center (MSRC).
In a Twitter thread, Wiz researcher Hillai Ben-Sasson explained how he was able to hack into Bing's content management system (CMS). By logging into Microsoft's cloud computing platform Azure, he discovered that he could grant all users access to internal Microsoft apps. He then accessed a database of Bing's search results. From there, Ben-Sasson figured out that he could actually modify what showed up in the results.
Wiz researchers also discovered that Bing was vulnerable to a Cross-Site Scripting (XSS) attack and discovered they had access to sensitive Office 365 data including Outlook emails, Calendar information, and Teams messages. MSRC detailed security updates and shared recommendations for Azure AD admins and developers in its blog post.
SEE ALSO: Protect your privacy with the best free VPNThe purpose of the researchers' experiment was to show that it was possible and share its findings with Microsoft. But it shows how malicious hackers could have wreaked havoc for Bing.
"A malicious actor with the same access could’ve hijacked the most popular search results with the same payload and leak sensitive data from millions of users," said the Wiz blog post. Luckily it was caught before any major damage was done.
This Tweet is currently unavailable. It might be loading or has been removed.
Microsoft confirmed that it has been fixed as of March 29. Wiz received a $40,000 "bug bounty" for reporting the vulnerability, which it it plans to donate to an unspecified recipient.
Topics Cybersecurity Microsoft
Barbie has a brandUber knows you're more likely to pay surge prices when your phone is dyingBeyoncé's 'APESH*T' dance inspires the best meme of fans dancingJon Snow is making man perms a thingBest Pride parade photos of 2018World Cups fans of Senegal and Japan give us a heartHear me out: Adults should listen to lullabies, tooHere are all 47 artists featured in Netflix's ad highlighting black representationKevin the permanently surprised cat has a story to inspire youYale spotlights genderUber knows you're more likely to pay surge prices when your phone is dying5 InternetWatch Kesha finally get to sing her heart out at the Billboard Music Awards14 food festivals that show how serious America is about foodDiscover the world's most Instagrammed coffeeThe top 10 games of 2018 (so far)New Google Maps features just started rolling out — do you have them?Jurassic World Evolution review: Theme park sim, with a side of chaosAriana Grande falls on the red carpet, recovers like a queenScientists have finally come up with a solution for the world's most annoying household sound 6 key 'Guardians of the Galaxy 2' teaser moments you missed Josh Brown's letters admitting to domestic violence are now haunting the NFL Newsflash: Climate change is limiting the availability of your beloved wine See a Tesla drive itself to work all on its own Jose Bautista will never out Chrissy Teigen is NOT having it with mommy shamers NYT Connections Sports Edition hints and answers for June 13: Tips to solve Connections #262 Trump says he'll accept the election results... if he wins Singapore will put high This app wants to be the SoundCloud of podcasting Australian man found not guilty of murdering his Tinder date Man claims iPhone 7 burst into flames in his car Twitter cuts ties with another social media surveillance company Rocky Horror Picture Show: Fox version isn't live, and it's a problem Trump definitely torn on whether Putin is his bestie or not Joe Jonas accidentally got porn sent to his parent's house one time Kendall Jenner and Gigi Hadid appear knee History's most spectacular Mars mission fails Watch Giuliani grab and cling to this female reporter's wrist That time Benedict Cumberbatch waltzed into a comics shop as Doctor Strange
3.9434s , 8206.6484375 kb
Copyright © 2025 Powered by 【Six Swedish Girls at a Pump (High Test Girls】,Fresh Information Network