"Microsoft's Internal Password Exposure: A Security Blunder Uncovered"
TL;DR
Microsoft left an Azure-hosted server containing sensitive data linked to its Bing search engine open to the internet without password protection, potentially exposing passwords, keys, and credentials of its employees. The exposed credentials could have led to significant data leaks and compromised services. The company was notified about the vulnerability on February 6th and locked it down by March 5th. This incident adds to a series of cybersecurity mishaps for Microsoft, prompting the company to overhaul its security practices.
- Microsoft left internal passwords exposed in latest security blunder The Verge
- Microsoft employees exposed internal passwords in security lapse TechCrunch
- Passwords, keys and more: The internal data that Microsoft employees exposed on the open internet The Times of India
- Microsoft data breach: Employees’ credentials like passwords leaked on internet Business Today
- A security group found a Microsoft server with key data that was not password protected Neowin
Want the full story? Read the original reporting
Read on The Verge