Monday January 21, 2019
Home Lead Story Bug Spotted i...

Bug Spotted in Microsoft Office 365, Outlook

Several tech companies offer bug bounty incentives. Sahad also received bug bounty from Facebook last year for discovering a bug in the social networking platform

0
//
Microsoft
Microsoft launches e-commerce portal for Telangana's handloom weavers. Pixabay

A Kerala-based application security engineer has won bug bounty from Microsoft for discovering a series of vulnerabilities that left over 400 million Microsoft users’ accounts — from Office 365 to Outlook emails — open to hacking.

Sahad NK, who works as a security researcher with cybersecurity portal Safetydetective.com, came across multiple vulnerabilities that, when chained together, allow an attacker to take over any Microsoft Outlook, Microsoft Store, or Microsoft Sway account simply via the victim clicking on a link.

“Immediately after finding these vulnerabilities, we contacted Microsoft via their responsible disclosure programme and started working with them,” said Safetydetective on Tuesday.

The vulnerabilities were reported to Microsoft in June and fixed by November end.

“While the vulnerability proof of concept was only made for Microsoft Outlook and Microsoft Sway, we expect it to affect all Microsoft accounts including Microsoft Store,” said Sahad.

Microsoft, PUBG
A sign for Microsoft is seen on a building in Cambridge. VOA

Sahad discovered that a Microsoft subdomain, “success.office.com”, had not been properly configured. He also found bug in Microsoft Office, Store and Sway products.

A string of bugs when chained together created the perfect attack to gain access to someone’s Microsoft account — simply by tricking a user into clicking a link.

“Anyone’s Office account, even enterprise and corporate accounts, including their email, documents and other files, could have been easily accessed by a malicious attacker, and it would have been near-impossible to discern from a legitimate user,” said TechCrunch.

Also Read- New Bug Forces Alphabet to Expedite Google+ API Shutdown

Sahad, with the help of fellow security researcher Paulos Yibelo, reported the bug to Microsoft, which fixed the vulnerability and gave an unspecified amount as bug bounty to Sahad.

Several tech companies offer bug bounty incentives. Sahad also received bug bounty from Facebook last year for discovering a bug in the social networking platform. (IANS)

Next Story

Microsoft Lays AI Sensors for Smart Farming, Cutting-edge Healthcare in India

"The role of AI will only get bigger for both agriculture and healthcare sectors in India. The seeds are now sown," Maheshwari added

0
Microsoft
Logo of Microsoft outside it's office. Pixabay

China, the world’s biggest agricultural producer, is leading the race when it comes to empowering farmers with Artificial Intelligence (AI)-driven technologies.

The aim is clear: To help the community digitally record information to cut costs and increase yields — with just a smartphone in their hands as AI leveraged Cloud computing to make sense of the data for farmers.

India has now embarked on a journey to bring AI sensors into the fields.

For Anant Maheshwari, the company’s India President, Microsoft has begun empowering small-holder farmers in India to increase their income through higher crop yield and greater price control.

“We are working with farmers, state governments, the Ministry of Electronics and Information Technology (MeitY) and the Ministry of Agriculture and Farmers Welfare to create an ecosystem for AI into farming,” Maheshwari told IANS.

In some villages in Telangana, Maharashtra and Madhya Pradesh, farmers are receiving automated voice calls that tell them whether their cotton crops are at risk of a pest attack, based on weather conditions and crop stage.

“There are companies that serve equipments and capabilities for farmers. We are working with most of the stakeholders, like generic crop protection and seeds company United Phosphorus Ltd and engineering conglomerate Escorts, to create better AI-based models for farming in the country,” informed Maheshwari.

With United Phosphorus, Microsoft is working on providing front-end capabilities for farmers.

Escorts is working with Microsoft for its Cloud and AI technology enabling precision agriculture capabilities to help farmers make informed decisions and get more from their farms.

In collaboration with the International Crop Research Institute for the Semi-Arid Tropics (ICRISAT), Microsoft has developed an AI-Sowing App powered by Cortana Intelligence Suite including Machine Learning and Power BI.

The app sends sowing advisories to participating farmers on the optimal date to sow. The farmers don’t need to install any sensors in their fields or incur any capital expenditure. All they need is a feature phone capable of receiving text messages.

Representational image.
Representational image. Wikimedia Commons

After laying the initial infrastructure for smart agriculture, Microsoft has also taken further steps towards cutting-edge health care with the help from AI-based “Intelligent Cloud” and “Intelligent Edge”.

Nearly three million heart attacks happen in India every year and 30 million Indians suffer from coronary diseases.

In a novel effort to predict the risk of cardiovascular disease (CVD) among the Indian population, Microsoft India and Apollo Hospitals have launched the first-ever AI-powered heart disease risk score API (application programme interface).

It provides the capability of applying ML and AI to cardio-vascular health records to develop an Indian-specific heart risk score.

With the new heart risk score for India, Apollo Hospitals’ AI model helps gauge a patient’s risk for heart disease and provides rich insights to doctors on treatment plans and early diagnosis.

“This shows how AI-driven models can make a big difference and help the doctors in a country where health care needs.

Also Read- Apple Reselling iPhone SE Devices in US

The company has also applied AI to devices for early detection of diabetic retinopathy to prevent blindness.Microsoft India also announced a partnership with SRL Diagnostics to expand the “AI Network for Healthcare” to pathology to detect cancer.

Dr Devi Prasad Shetty, Chairman and Executive Director of Narayana Health, has performed over 15,000 heart operations. His hospital chain does one-sixth of heart surgeries in India.

“His hospital chain is working on Kaizala app, Power BI and Azure to run the operation smoothly.

“Dr Shetty aims to put all electronic health records on Kaizala for real-time data analysis. This gives a doctor full information about a patient and his past,” said Maheshwari.

In October, NITI Aayog entered into a partnership with Microsoft to deploy AI technologies in areas such as agriculture, healthcare, natural language computing and sustainable environment.

“The role of AI will only get bigger for both agriculture and healthcare sectors in India. The seeds are now sown,” Maheshwari added. (IANS)