Yikes. Lots of weird auth-related news coming out of Microsoft in the past week or so. A coworker shared this vulnerability disclosure the other day: https://ww

Yikes. Lots of weird auth-related news coming out of Microsoft in the past week or so. A coworker shared this vulnerability disclosure the other day: https://www.praetorian.com/blog/azure-b2c-crypto-misuse-and-account-compromise/ https://www.praetorian.com/blog/azure-b2c-crypto-misuse-and-... I’d be curious about a follow up if the author ever figures out how the account takeover happened. I wonder if logging into the account on a school device resulted in automatic enrollment or something.