article thumbnail

Microsoft fixed Azure AD bug that led to Bing.com results manipulation and account takeover

Security Affairs

One of these apps is a content management system (CMS) that powers Bing.com and allowed us to not only modify search results, but also launch high-impact XSS attacks on Bing users.” ’ The shared responsibility model allows application owners to add an authentication function by simply clicking a button.

CMS 81