Microsoft has fixed a vulnerability in its AI-enabled Azure Health Bot that could have allowed attackers to access cross-tenant resources. The elevation of privilege vulnerability was discovered by Tenable researchers in June and patched by July. During routine investigations into data connections, the researchers were able to access an internal Microsoft subscription ID, potentially making other resources accessible.

Top 10 EdTech News Stories of February 2025
PowerSchool, a major US student information system provider, confirmed a data breach affecting millions of students. A stolen password led to unauthorized access, revealing names,