Microsoft fixed an Azure vulnerability after researchers found that the flaw could have let anyone alter Bing search results and access users' Office 365 data
The Verge Jess Weatherbed
Related Coverage
- The #BingBang - a Bing.com vulnerability discovered by Wiz Research Wiz on YouTube
- Guidance on Potential Misconfiguration of Authorization of Multi-Tenant Applications that use Azure AD Microsoft Security Response Center
- Microsoft Patched Bing Vulnerability That Allowed Snooping on Email and Other Data Wall Street Journal
- View article TechRadar
- View article Petri IT Knowledgebase
- Microsoft exploit let users edit Bing search results Silicon Republic
- This Bing flaw let hackers change search results and steal your files Digital Trends
- Microsoft fixes Azure BingBang bug that allowed Bing search hijacking and leaked private data BetaNews
- Microsoft fixes ‘BingBang’ vulnerability allowing Bing search content manipulation, Office 365 data theft MSPoweruser
- Researcher breaks in to Bing, Office 365 via AAD misconfiguration, now fixed OnMSFT.com
- Azure blunder left Bing results editable, MS 365 accounts potentially exposed The Register
- Microsoft Fixes Vulnerability That Compromised Bing and Office 365 Thurrott
- BingBang Boom: Unraveling the AAD Misconfiguration that Compromised Bing and Beyond BigTechWire
- Vulnerability Enabled Bing.com Takeover, Search Result Manipulation HackRead
- Bing search results hijacked via misconfigured Microsoft app BleepingComputer
- Bing and millions of Microsoft 365 accounts were vulnerable to hackers due to the ‘BingBang’ vulnerability Windows Central
- Azure vulnerability allowed hackers to manipulate Bing results and take over accounts gHacks Technology News
- Microsoft Fixed Massive “BingBang” Vulnerability Days before Launching Bing Chat AI Search WinBuzzer
- Microsoft Cloud Vulnerability Led To Bing Search Hijacking, Exposure Of Office 365 Data SecurityWeek
- Startup Wiz Finds Critical Azure Flaw Tied to Bing Search The Information
- This mega Microsoft security flaw could let hackers change Bing results, access Outlook emails TechRadar
Discussion
-
@hillai
Hillai Ben-Sasson
on x
I hacked into a @Bing CMS that allowed me to alter search results and take over millions of @Office365 accounts. How did I do it? Well, it all started with a simple click in @Azure... 👀 This is the story of #BingBang 🧵⬇️ https://twitter.com/...
-
@tomwarren
Tom Warren
on x
In the same week Microsoft is trying to sell businesses on an AI-powered Security Copilot, a massive security breach has been disclosed in Azure. It allowed people to manipulate Bing search results and even access emails from Outlook accounts. Yikes. https://www.theverge.com/...