$60K bug bounty and thank you Tzah for not selling this on the black market where you likely could have made much more.
Tzah Pahima @TzahPahima
14 Jun 2022
I was able to access thousands of companies’ passwords on #Azure and run code on their VMs. This includes access to Microsoft’s own credentials… 💣 Here’s HOW I did it. This is the story of #SynLapse. (1/11)

Jun 14, 2022 · 11:55 PM UTC

2
2
23
Replying to @hal_pomeranz
$60k is a lot but seems WAY less than Tzah should have received for this. Companies really need to start paying security researchers and bug bounty hunters a lot more than what they currently do.
1
4
Agreed
1
Replying to @hal_pomeranz
Lol. That doesnot sound right.