Bug bounty hunter Sahad Nk recently uncovered a series of vulnerabilities that left Microsoft users’ accounts — from your Office documents to your Outlook emails — susceptible to hacking.
While working as a security researcher with cybersecurity site SafetyDetective,adult movie | Adult Movies Online Nk discovered that he was able to take over the Microsoft subdomain, http://success.office.com, because it wasn’t properly configured. This allowed the bug hunter to set up an Azure web app that pointed to the domain’s CNAME record, which maps domain aliases and subdomains to the main domain. By doing this, Nk not only takes control of the subdomain, but also receives any and all data sent to it.
This is where the second major vulnerability comes into play.
Microsoft Office, Outlook, Store, and Sway apps send authenticated login tokens to the http://success.office.comsubdomain. When a user logs in to Microsoft Live, login.live.com, the login token would leak over to the server controlled by Nk. He would then just have to send over an email to the user asking them to click a link, which would provide Nk with a valid session token — a way to log in to the user’s account without even needing their username or password. And, because Nk has access on Microsoft’s side, that link would come in the form of a login.live.com URL, bypassing phishing detection and even the savviest of internet users.
According to SafetyDetective, the issues were reported to Microsoft in June. They were fixed just last month, in November.
Topics Cybersecurity Microsoft
Waitin’ on the Student Debt Jubilee
The whitest paint ever could save your energy bills and the climate
Gabby Petito's disappearance shouldn't be an internet true crime thriller
Your car knows too much about you. That could be a privacy nightmare.
Best Hydro Flask deal: Save $10 on a 24
Student discovers snake that's slithered into her Gryffindor backpack
Gorillas find love using a dating app matching algorithm, too
How to calm your nerves while watching the Olympics
Operation Rock Wallaby rains food down on wildlife hurt by bushfires
'Plogging' is a Swedish fitness trend that combines running with picking up litter
NYT mini crossword answers for May 9, 2025
LG is selling a $1.7 million TV
Walmart deliveries arrive via autonomous Ford cars
The undying joy of ‘What We Do in the Shadows'
Episode 4: The Wave of the Future
Panera wants you to get engaged at Panera, and everyone's wondering why?
Kanye West is back on Instagram, and what is happening?
Olympic mascots, ranked
Amazon Pet Day: All the best deals
Watch Elon Musk's Tesla Roadster disappear into deep space
NYT Strands hints, answers for January 6Seahawks vs. Rams 2025 livestream: How to watch NFL onlineSeahawks vs. Rams 2025 livestream: How to watch NFL onlineChiefs vs. Broncos 2025 livestream: How to watch NFL onlineNYT Connections hints and answers for January 3: Tips to solve 'Connections' #572.CES 2025: Bird Buddy creators introduce Petal AI nature cameraTexans vs. Titans 2025 livestream: How to watch NFL onlineRoborock Saros Z70 at CES 2025: A huge flexNYT Strands hints, answers for January 6Orlando Magic vs. New York Knicks 2025 livestream: Watch NBA onlineAtlanta Hawks vs. Los Angeles Clippers 2025 livestream: Watch NBA onlineCommanders vs. Cowboys 2025 livestream: How to watch NFL onlineBest robot vacuum deal: Save $100 on iRobot Roomba Q0120CES Unveiled 2025: OpenDroids' R2D3 domestic robot is 'Roomba on crack'Los Angeles Lakers vs. Houston Rockets 2025 livestream: Watch NBA onlineNYT Connections hints and answers for January 5: Tips to solve 'Connections' #574.Wordle today: The answer and hints for January 4, 2025Seahawks vs. Rams 2025 livestream: How to watch NFL onlineNYT Connections hints and answers for January 3: Tips to solve 'Connections' #572.Meta deletes all AI character profiles on Facebook, Insta after backlash There's a reason why you feel like time is moving slower in Trump's America Goat forms unlikely friendship with UPS delivery guy Norma Cook, the 89 CeeLo Green seems obsessed with Beyoncé and his latest weird song proves it Here's when Apple will show us the next major versions of iOS and macOS 'Riverdale' finally starts revealing its secrets in episode 4 Google X's Loon internet balloon project announces a breakthrough You may hate me but, you shouldn't get too excited about an *NSYNC reunion Police are mad about a 'Grand Theft Auto' mod and all the internet can do is LOL PewDiePie apologizes for anti Makeup brand wants to stop Trump supporters from buying its products Donald Trump is basically Frank Costanza so it’s going to be Festivus all the time Using Microsoft Word with the MacBook Pro Touch Bar is pretty cool The 'Game of Thrones' cast is freaking out about the show ending, too A bike helmet with turn signal lights will make rides a whole lot safer Chill out, woolly mammoths aren't coming back just yet Fumed Indians continue to troll NYT over 2 A new 'continent's' been found under the magical land of New Zealand New 'Tiny Trumps' meme has flooded the internet big time Even this Fox News anchor thinks Trump's 'ridiculous' lies have gone too far
2.4518s , 10108.6953125 kb
Copyright © 2025 Powered by 【adult movie | Adult Movies Online】,Unobstructed Information Network