Microsoft has patched a high-severity vulnerability in its Bing search engine, which allowed potential threat actors to not only alter search results, but also access people’s Office 365 data.
Cybersecurity researchers from Wiz discovered the flaw in January 2023, identifying it as a misconfiguration in the Azure Active Directory (AAD) identity and access management service in Microsoft's Azure cloud platform.
