Recent Stories
Keeping the Human in Medicine: Two AI CoLab Researchers on What Machines Can’t ReplaceSomeone Is Hacking the Freezers. Pay Attention.Thinking of Running in 2028? Start HereWhat the Lame Duck Session Has to Do With the Ultimate 21st-Century Power Tool: RobotsBlack October Wasn't an Attack Wave. It Was a Warning.Extreme Ownership Means Ultimate Achievement – NASA Culture Shift

The Wave

← Back to the board
News

BingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz Blog

Why it’s here: Specialist cybersecurity research on a widespread Azure AD misconfiguration that exposed Microsoft applications and Bing to manipulation and Office 365 data theft, bearing directly on federal cybersecurity policy and critical-infrastructure risk for a major vendor.

Trace across the board

Item

  1. 5d agoWiz ResearchBingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz BlogWiz Research reports that 82% of organizations grant third-party cloud vendors wide read access and 76% grant roles enabling full account takeover, based on an analysis of 1,300+ AWS accounts and 40+ vendors.
    10 articles
    1. 5d agoWiz ResearchWiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz Blog
    2. 5d agoWiz ResearchChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz Blog
    3. 5d agoWiz ResearchThe cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors | Wiz Blog
    4. 5d agoWiz ResearchHow we broke the cloud with two lines of code: the full story of ChaosDB | Wiz Blog
    5. 5d agoWiz ResearchBingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz Blog
    6. 5d agoWiz ResearchBingBang: How a simple developer mistake could have led to Bing.com takeover | Wiz Blog
    7. 5d agoWiz ResearchAttachMe: critical OCI vulnerability allows unauthorized access to customer cloud storage volumes | Wiz Blog
    8. 5d agoWiz ResearchChaosDB: How we hacked thousands of Azure customers’ databases | Wiz Blog
    9. 5d agoWiz Research“Secret” Agent Exposes Azure Customers To Unauthorized Code Execution | Wiz Blog
    10. 4d agoWiz ResearchPickupBreaking Down PHP2Shell with Sagi Tzadik & Thai Duong | Wiz
    Cyber161 linked

Coverage

1 outlets · first seen 5d ago

Connected

21 links

About

  • Microsoft
  • Wiz
  • Microsoft 365

Cookies

Analytics cookies help us see how the site is used. They only run if you accept. Privacy Policy

BingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz Blog — The Wave