Microsoft allegedly faced a data breach that exposed employee credentials and company files to the internet. This was revealed by security researchers Can Yoleri, Murat Özfidan, and Egemen Koçhisarlı from SOCRadar, a cybersecurity company that helps organizations discover security weaknesses. They discovered that open public storage servers hosted on Microsoft's Azure cloud service discreetly store internal information related to Microsoft's Bing search engine.
Notably, TechCrunch reports that this breach has now been resolved.
The data available online included code, scripts, and configuration files containing passwords, keys, and credentials used by Microsoft employees to access other internal databases and systems. What is alarming is that this server was not password protected and could be accessed by anyone on the Internet.
According to the report, the leaked data may have helped malicious attackers access other internal Microsoft files. Yoleri's statement said that determining the location of internal files “could result in a more significant data breach and compromise the services you use.”
It has been revealed that researchers had already reported the issue to Microsoft in February. However, it took the company almost a month to resolve the issue. It remains unclear whether the data was accessed by an unauthorized third party or how long the data was exposed before the company decided to protect it.
Microsoft has not made any public statements regarding the security revocation at this time.
Earlier this week, India-based wearables company Boat also allegedly faced a massive data breach that exposed the personal information of more than 7.5 million customers on the dark web. The data reportedly included names, addresses, phone numbers, email addresses, and customer IDs. This type of data breach can lead to financial fraud, phishing, and identity theft. The company publicly acknowledged that it was investigating the reported breach and assured customers that protecting their data remains its top priority.
Also read:
Travel technology checklist for a long weekend: power banks, navigation tools, anti-theft apps, and more
Dell Alienware M16 R2 gaming laptop now available in India: Check price, specs and features