AAD misconfiguration led to Bing.com results manipulation, account takeover(wiz.io)
358 points by alosch7 | 96 comments
Wiz Research blog post explaining how a common Azure Active Directory misconfiguration exposed Microsoft apps, enabling Bing.com result manipulation and account takeover.