Israeli cyber investigator uncovers Microsoft password leak

• Published date: 23 September 2021
• Author: JERUSALEM POST STAFF
• Publication title: Jerusalem Post, The: Web Edition Articles (Israel)

Amit Serper, a Guardicore Labs investigator who previously worked as a cyber investigator at the Prime Minister's Office, discovered a breach in Microsoft's login mechanism.

According to Guardicore Labs' team of cyber investigators, the mechanism automatically sent usernames and passwords to network domains.

cnxps.cmd.push(function () { cnxps({ playerId: '36af7c51-0caf-4741-9824-2c941fc6c17b' }).render('4c4d856e0e6f4e3d808bbc1715e132f6'); });

>

Using this finding, the team bought several domain names and over 372,000 usernames and passwords of Microsoft clients were subsequently sent to these domains.

Hundreds of thousands of accounts to Microsoft products such as Outlook could be hacked into using...