💥 EXCLUSIVE: Wiz Research uncovers #BingBang — a Bing.com vulnerability 💥

This vulnerability in Bing could enable our research team to manipulate Bing search results and launch XSS attacks on Bing users, potentially accessing their Office 365 data, including Outlook emails, Teams messages, OneDrive files, and more 🕵️

Our researchers discovered an accidentally exposed admin interface related to Bing.com with a misconfiguration in AAD allowing any user to log in without authentication.

👉 All issues were responsibly disclosed to Microsoft upon discovery. Microsoft rapidly fixed the bing.com application vulnerability and modified some AAD functionality to reduce customer exposure.

📖 To learn more, read our comprehensive blog post about it:
https://www.wiz.io/blog/bingbang