In the Windows 8 and 8/1 operating systems, as well as the corresponding mobile OS, Microsoft actively used tiles. Later they migrated to Windows 10. The same thing appeared later on the Web under the name Windows Live. Using this service, website owners could display news on tiles. When it became clear that the new product was not in demand, the company turned off the service, but delete name server entries.
Reportedly, the subdomain that worked with the service turned out to be vulnerable because of this. The flaw made it possible to display any images, text, etc. in tiles. This is implemented using a special XML file format, which by default allows you to display data in tiles, including from RSS feeds. At one time, Microsoft launched a service that automatically converted RSS feeds into a special XML format.
All this made it possible to broadcast any data to web pages. It's important to note that web pages using Microsoft's defunct service included Russian email provider Mail.ru, Engadget, and German news sites Heise Online and Giga.
So far, Microsoft has not responded to media requests on this matter or commented on the data, so it is not clear whether the company itself can cope with the problem. However, the Redmond corporation should do this quickly, since the use of the subdomain may not be limited to relatively harmless jokes with replacement text.
Source: 3dnews.ru