Microsoft Accidentally Exposes Sensitive Information on GitHub
Portfolio Pulse from Anusuya Lahiri
Microsoft Corp recently addressed a security incident where an employee inadvertently shared a URL with an overly permissive Shared Access Signature (SAS) token in a public GitHub repository, exposing 38 terabytes of private data. The data included a disk backup of two employees' workstations, secrets, private keys, passwords, and over 30,000 internal Microsoft Teams messages. The issue was reported by Wiz.io and Microsoft has since revoked the SAS token and restricted external access to the storage account. Microsoft confirmed no customer risk due to the exposure.

September 19, 2023 | 12:45 pm
News sentiment analysis
Sort by:
Descending
NEUTRAL IMPACT
The news mentions Alphabet Inc's Google in the context of open-source software, but does not directly impact the company.
The news mentions Alphabet Inc's Google in the context of open-source software, but does not provide any information that would directly impact the company or its stock.
CONFIDENCE 100
IMPORTANCE 10
RELEVANCE 20
NEUTRAL IMPACT
The news mentions Alphabet Inc's Google in the context of open-source software, but does not directly impact the company.
The news mentions Alphabet Inc's Google in the context of open-source software, but does not provide any information that would directly impact the company or its stock.
CONFIDENCE 100
IMPORTANCE 10
RELEVANCE 20
NEGATIVE IMPACT
Microsoft's inadvertent data exposure could potentially harm the company's reputation for security, although the company has stated that there was no customer risk due to the exposure.
The news directly involves Microsoft and its security practices. While the company has stated that there was no customer risk due to the exposure, such incidents can potentially harm the company's reputation for security, which could negatively impact the stock in the short term.
CONFIDENCE 90
IMPORTANCE 70
RELEVANCE 100