microsoft

66 articles
Sort: New Top Best
clear filter
bug-bounty625 facebook443 xss316 google119 rce106 microsoft66 csrf60 web355 account-takeover55 writeup50 malware43 sqli41 apple41 exploit40 ssrf35 cve34 privilege-escalation34 dos34 cloudflare29 defi28 phishing25 smart-contract-vulnerability25 access-control25 ethereum24 smart-contract24 clickjacking24 idor24 subdomain-takeover24 vulnerability-disclosure23 remote-code-execution21 auth-bypass19 lfi18 race-condition16 cloud15 authentication-bypass15 cors15 solidity15 node15 aws14 reverse-engineering13 oauth13 web-security12 sql-injection12 supply-chain12 denial-of-service11 info-disclosure11 browser11 delegatecall11 web-application-security11 vulnerability10
0
Amazon Employees Say AI Is Just Increasing Workload
security
google microsoft supply-chain
gizmodo.com · jamesgill · 42 minutes ago · details · hn
0
On Making
security
google microsoft
beej.us · ingve · 45 minutes ago · details · hn
0
MCPs, CLIs, and skills: when to use what?
vulnerability
apple cloudflare microsoft node oauth rce
jngiam.bearblog.dev · jngiam1 · 50 minutes ago · details · hn
0
How to use Claude Cowork – Complete guide
vulnerability
apple google microsoft rce
overtoncollective.com · Ali_Jiwani · 54 minutes ago · details · hn
0
Addressing GitHub's recent availability issues
security
facebook microsoft
github.blog · tjwds · 1 hour ago · details · hn
0
Rise of the AI Soldiers
security
google microsoft
time.com · jMyles · 1 hour ago · details · hn
0
NM framework on Karpathy's autoresearch factory
exploit
apple exploit microsoft
nervousmachine.substack.com · hb_124 · 1 hour ago · details · hn
0
The FermAI Paradox: Agents Need Their IDE Moment
security
microsoft
docs.ctx.rs · ripped_britches · 2 hours ago · details · hn
0
Local Agents with Llama.cpp and Pi
security
aws google microsoft node
huggingface.co · kristianpaul · 2 hours ago · details · hn
0
Anthropic invests $100M into the Claude Partner Network
exploit
aws exploit google microsoft
anthropic.com · surprisetalk · 2 hours ago · details · hn
0
'The shine has been taken off': Dubai faces existential threat
security
facebook google microsoft
theguardian.com · akbarnama · 2 hours ago · details · hn
0
C++26 Safety Features Won't Save You (and the Committee Knows It)
exploit
exploit google microsoft
lucisqr.substack.com · pjmlp · 2 hours ago · details · hn
0
Enrich sign-ups for your SaaS for FREE
security
microsoft
trialhook.com · jefim · 2 hours ago · details · hn
0
Generation Jones
security
microsoft
en.wikipedia.org · jamesgill · 2 hours ago · details · hn
0
Shooting at Michigan Shul
security
facebook microsoft react
freep.com · marysminefnuf · 2 hours ago · details · hn
0 6/10
How I Might Have Hacked Any Microsoft Account
bug-bounty

A security researcher discovered a rate-limiting vulnerability in Microsoft's password reset flow that could be exploited via concurrent requests to brute-force 7-digit security codes, bypassing encryption and rate limits to enable account takeover even on accounts with 2FA enabled. Microsoft patched the vulnerability and awarded a $50,000 bounty.

account-takeover password-reset rate-limiting-bypass concurrent-requests mfa-bypass encryption-bypass brute-force microsoft bug-bounty authentication
Laxman Muthiyah Microsoft MSRC HackerOne Instagram
thezerohack.com · kh4sh3i/bug-bounty-writeups · 3 hours ago · details
0
Two RCE in SharePoint
vulnerability

Article discussing two remote code execution vulnerabilities in Microsoft SharePoint. The content appears to be a blog index or archive page listing various security research posts by the author.

remote-code-execution sharepoint microsoft web-application-security rce
Soroush Dalili SharePoint
soroush.secproject.com · devanshbatham/Awesome-Bugbounty-Writeups · 3 hours ago · details
0
How I hacked 40k user accounts of microsoft using 2FA bypass outlook
authentication
2fa-bypass microsoft writeup
medium.com · devanshbatham/Awesome-Bugbounty-Writeups · 3 hours ago · details
0
How I abused 2FA to maintain persistence after password recovery change google microsoft instragram
security
facebook google microsoft
medium.com · devanshbatham/Awesome-Bugbounty-Writeups · 3 hours ago · details
0
How I got 500USD from microsoft for CSRF vulnerability
vulnerability
csrf microsoft
medium.com · devanshbatham/Awesome-Bugbounty-Writeups · 3 hours ago · details
0
Microsoft Yammer clickjacking exploiting HTML5 security features
security
clickjacking microsoft
seekurity.com · devanshbatham/Awesome-Bugbounty-Writeups · 3 hours ago · details
0
XSS in azure devOps
vulnerability
microsoft xss
5alt.me · devanshbatham/Awesome-Bugbounty-Writeups · 3 hours ago · details
0
Microsoft follow feature XSS (CVE-2017-8514)
vulnerability
cve microsoft xss
CVE-2017-8514
medium.com · devanshbatham/Awesome-Bugbounty-Writeups · 3 hours ago · details
More