HOW I ACCESSED MICROSOFT'S SERVICENOW — EXPOSING ALL MICROSOFT EMPLOYEE EMAILS, CHAT SUPPORT TRANSCRIPTS & ATTACHMENTS

Summary from the TLDR InfoSec newsletter

Moblig was able to access Microsoft's ServiceNow platform and view sensitive data including employee emails and support ticket attachments. The security flaw allowed unauthorized access to thousands of support ticket attachments and over 250,000 employee emails. The issue was reported to Microsoft and resolved without a bounty reward.