Misconfigured Database Exposed Microsoft Site to Attacks

A researcher discovered that a database connected to the mobile version of Microsoft’s careers website was not properly configured, potentially allowing malicious actors to abuse it for various purposes.

read more

Original author: Eduard Kovacs