Start United States USA — IT Microsoft ignored months-old security bug in Outlook email system

Microsoft ignored months-old security bug in Outlook email system

99
0
TEILEN

SolidLab security researcher Vsevolod Kokorin discovered a vulnerability that allowed him to impersonate any Outlook account, sending potentially malicious emails from apparently legitimate users. Kokorin demonstrated the.
Facepalm: While Microsoft focuses on fixing its weak security practices, critical bugs in its many services and products keep popping up. A researcher discovered a dangerous flaw in Outlook months ago, but Microsoft waited until now to respond and attempt to fix it.
SolidLab security researcher Vsevolod Kokorin discovered a vulnerability that allowed him to impersonate any Outlook account, sending potentially malicious emails from apparently legitimate users. Kokorin demonstrated the critical bug by spoofing Microsoft’s security team, but Redmond’s response wasn’t exactly what he expected.
SolidLab discovered the flaw months ago and alerted Microsoft immediately. The company said it couldn’t reproduce the issue, so Kokorin sent a video showing his successful exploitation with a „full“ proof-of-concept (PoC).

Continue reading...