Microsoft validation error allowed state actor to access user email of government agencies and others

Categories: News

Tags: Microsoft. MSA

Tags: OWA

Tags: validation token

Tags: signing key

Tags: Storm-0556

Tags: GetAccessTokensForResource

Due to a validation error in Microsoft code, a suspected Chinese attacker was able to access user email from approximately 25 organizations, including government agencies.

(Read more…)

The post Microsoft validation error allowed state actor to access user email of government agencies and others appeared first on Malwarebytes Labs.

Read more