Microsoft leaks 38TB of private data

[Ink]

Content source

https://www.bleepingcomputer.com/news/microsoft/microsoft-leaks-38tb-of-private-data-via-unsecured-azure-storage/

The Microsoft AI research division accidentally leaked dozens of terabytes of sensitive data starting in July 2020 while contributing open-source AI learning models to a public GitHub repository.

Almost three years later, this was discovered by cloud security firm Wiz whose security researchers found that a Microsoft employee inadvertently shared the URL for a misconfigured Azure Blob storage bucket containing the leaked information.

The Wiz Research Team found that besides the open-source models, the internal storage account also inadvertently allowed access to 38TB worth of additional private data.

The exposed data included backups of personal information belonging to Microsoft employees, including passwords for Microsoft services, secret keys, and an archive of over 30,000 internal Microsoft Teams messages originating from 359 Microsoft employees.

In an advisory on Monday by the Microsoft Security Response Center (MSRC) team, Microsoft said that no customer data was exposed, and no other internal services faced jeopardy due to this incident.

Wiz reported the incident to MSRC on June 22nd, 2023, which revoked the SAS token to block all external access to the Azure storage account, mitigating the issue on June 24th, 2023.

 

[Marko :)]

 

[[correlate]]

As part of the Wiz Research Team’s ongoing work on accidental exposure of cloud-hosted data, the team scanned the internet for misconfigured storage containers. In this process, we found a GitHub repository under the Microsoft organization named . The repository belongs to Microsoft’s AI research division, and its purpose is to provide open-source code and AI models for image recognition. Readers of the repository were instructed to download the models from an Azure Storage

38TB of data accidentally exposed by Microsoft AI researchers | Wiz Blog

Wiz Research found a data exposure incident on Microsoft’s AI GitHub repository, including over 30,000 internal Microsoft Teams messages – all caused by one misconfigured SAS token

www.wiz.io

 

[TairikuOkami]

Darn it, I knew that I should not have shared my sleep schedule with MS. That explains why my castle in Stronghold Online was taken over twice during that time, while I was asleep.

 

[Jonny Quest]

Darn it, I knew that I should not have shared my sleep schedule with MS. That explains why my castle in Stronghold Online was taken over twice during that time, while I was asleep.

What are you talking about, I'm still trying to perfect my Asteroid and Space Invader skills

Technology News - Atari 2600+

It's time to dust off your old Atari cartridges as the company again tries to tap into gaming nostalgia with an updated version of its iconic Atari 2600. The upcoming Plus model has the same look as the 80s classic, and will ship with a 10-in-1 cartridge but also supports legacy 2600 and 7800...

malwaretips.com