News

Consent and Compromise: How We Got Access to 22 Internal Microsoft Services

  • Vaisha Bernard--Eye.security
  • published date: 2025-08-09 21:59:43 UTC

The Eye Security Research team has uncovered a new critical misconfiguration that exposed sensitive data at internal Microsoft applications.

This blog is about how I got access to over 22 internal Microsoft services and how you might be vulnerable too. After my last talk at the 38C3 conference in Hamburg, this was the top comment on YouT… [+12689 chars]