Security researchers from SOCRadar, a cybersecurity firm, have uncovered a data breach allegedly involving Microsoft, where employees’ credentials and internal company files were exposed to the internet.
Can Yoleri, Murat Ozfidan, and Egemen Kohisarlı discover an open and public storage server hosted on Microsoft’s Azure cloud service, which was storing sensitive information related to Microsoft’s Bing search engine without proper security measures in place.
The breach, initially unnoticed by Microsoft, was reportedly resolved following its discovery. As reported by TechCrunch.
The data exposed online consisted of codes, scripts, and configuration files containing passwords, keys, and credentials that are used by Microsoft employees to access internal databases and systems.
Alarmingly, the server was left unprotected and did not have a password, making it accessible to anyone on the internet.
According to the researchers, the exposed data could have provided malicious actors with access to other internal Microsoft files, potentially leading to more severe data breaches and compromising services in use.
The researchers notified Microsoft of the issue in February, yet it took the company nearly a month to address it. However, it remains unclear whether any unauthorized parties accessed the data and for how long it remained exposed before mitigation measures were implemented.
As of now, Microsoft has not issued an official statement addressing the security lapse.
In a related incident, India-based wearable company Boat recently experienced a significant data breach, wherein the personal information of over 7.5 million customers surfaced on the dark web. The leaked data included names, addresses, phone numbers, email addresses, and customer IDs, posing risks of financial fraud, phishing attempts, and identity theft.


)

)
)
)
)
)
)
)
)
