A major security exploit that let researchers change Bing search results was revealed this week.
The Well-Endowed Customer and Young Female Escortvulnerability was discovered in January by cybersecurity research company Wiz and reported to the Microsoft Security Response Center (MSRC).
In a Twitter thread, Wiz researcher Hillai Ben-Sasson explained how he was able to hack into Bing's content management system (CMS). By logging into Microsoft's cloud computing platform Azure, he discovered that he could grant all users access to internal Microsoft apps. He then accessed a database of Bing's search results. From there, Ben-Sasson figured out that he could actually modify what showed up in the results.
Wiz researchers also discovered that Bing was vulnerable to a Cross-Site Scripting (XSS) attack and discovered they had access to sensitive Office 365 data including Outlook emails, Calendar information, and Teams messages. MSRC detailed security updates and shared recommendations for Azure AD admins and developers in its blog post.
SEE ALSO: Protect your privacy with the best free VPNThe purpose of the researchers' experiment was to show that it was possible and share its findings with Microsoft. But it shows how malicious hackers could have wreaked havoc for Bing.
"A malicious actor with the same access could’ve hijacked the most popular search results with the same payload and leak sensitive data from millions of users," said the Wiz blog post. Luckily it was caught before any major damage was done.
This Tweet is currently unavailable. It might be loading or has been removed.
Microsoft confirmed that it has been fixed as of March 29. Wiz received a $40,000 "bug bounty" for reporting the vulnerability, which it it plans to donate to an unspecified recipient.
Topics Cybersecurity Microsoft
Previous：Sméagol in the Sky
Next：The Same F’ing Song
Unions in Space
Top 10 Tech Pranks
4GB vs. 8GB: How Have VRAM Requirements Evolved?
Best laptop deal: Get the Lenovo IdeaPad Duet 5 for $200 off at Best Buy
Fear of a Black Universe
Best Buy's 'Black Friday in July' sale to compete with Prime Day 2025
NYT Strands hints, answers for June 18
3D Game Rendering 101
Lives Are on the Line
Rune vs. McDonald 2025 livestream: Watch Queens Tennis for free
Epic Systems v. The Work Force
Samsung Z Fold 7 may come with Google Veo 3 access
Best fitness tracker deal: Take $50 off the Oura Ring Gen3 at Amazon
50 Years Later: The Revolutionary 8008 Microprocessor
Memory Keepers
Xbox is building a new console with AMD chips, due in 2027
NYT Strands hints, answers for June 18
CapCut terms of service changes frighten TikTok users
#churchtoo
How to cancel Amazon Prime
How to turn your gross food into a crime against the internetThe 'Twilight' companion novel finally has a release dateKobe Bryant met George R.R. Martin to talk 'story' so retirement seems to be going wellTrump's Russian income is not being mocked at all. With few exceptions.My favorite college professor was YouTubeThe 11 best video games to play with your significant other'Disney Gallery: The Mandalorian' Ep 1 has a great Dave Filoni storyElon Musk wasn't kidding, he's actually selling his housesTexas theater chain to take your temperature as it reopensThe 'Twilight' companion novel finally has a release dateSit back and enjoy watching this smooth guy's Tinder game backfirePokémon X and Y: How to get every Mega Evolution'Normal People' stars talk romance, intimacy, and this irresistible relationshipHow to be a better ally to women on ZoomNYC subway will clean some cars for coronavirus with UVNSA tools at center of ransomware attacks hitting UK hospitalsThe Apple Watch can actually detect a dangerous heart conditionUber drivers and passengers will have to wear face masks in the U.S.This Dungeons & Dragons gift guide is a critical hitHow to be a better ally to women on Zoom Figs Have All the Answers It Is Very, Very, Very Hard to Adapt a Philip Roth Novel Emma Cline Wins Plimpton Prize; Ben Lerner Wins Terry Southern Prize by The Paris Review Staff Picks: Mary Ruefle, Lynda Barry, Bobby Hutcherson Death and All Her Friends #ReadEverywhere, Even Upside All the Misfits of This World Are Lonely: A Love Letter from Radclyffe Hall Prison Lit: Jones Very’s Words from the Asylum Hamtramck Disneyland, a Cubist Carnival in Michigan Meet Me in the Electrified Dome at the Temple of Hymen In Which Chester Himes Petitions to Save His Cat, Griot The Game of the Name: A Really Difficult Puzzle Unconventional, Part 5: Terry Southern Takes on the Fakes Unconventional, Part 3: Norman Mailer and the Pigs Kool Customer: Hunter S. Thompson Sells Cigs in Puerto Rico Now Online: Our Interviews with Robert Caro and Luc Sante The World’s Largest Picnic Basket is in Peril This Is Why You’re Not Supposed to Touch the Art Cool Struttin’ with Sonny Clark Is Kanye’s McDonald’s Poem a Parable of Class Struggle?
2.7035s , 8199.1640625 kb
Copyright © 2025 Powered by 【Well-Endowed Customer and Young Female Escort】,Evergreen Information Network