As cited
Copy frozen at (site build).
cloud saas
BingBang: How a simple developer mistake could have led to Bing.com takeover
Wiz Research discovered a misconfiguration in a Microsoft Bing application that could have allowed attackers to modify Bing search results and access private data of millions of users. The vulnerability stemmed from a developer mistake in how the application was set up. Microsoft addressed the issue following responsible disclosure.
Why it matters: All organizations using Microsoft cloud services should review their own application configurations for similar misconfigurations, as this type of error can expose search engines and user data at scale.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
cloud saas
BingBang: How a simple developer mistake could have led to Bing.com takeover
Wiz Research discovered a misconfiguration in a Microsoft Bing application that could have allowed attackers to modify Bing search results and access private data of millions of users. The vulnerability stemmed from a developer mistake in how the application was set up. Microsoft addressed the issue following responsible disclosure.
Why it matters: All organizations using Microsoft cloud services should review their own application configurations for similar misconfigurations, as this type of error can expose search engines and user data at scale.
- Source published
- First seen by Cybersecurity Tracker