Microsoft Azure Ai Health Bot Infected With Critical Vulnerabilities

Multiple privilege escalation issues in Microsoft Azure’s Health Bot service were quickly patched, but highlight concerns about chatbot risks and access to sensitive health information. Exploitation of the bugs could have granted access to cross-tenant resources and potentially allowed for lateral movement within customer environments.