1 post
Microsoft confirms password reset exploitation. The reset endpoint is an authentication surface and must be controlled as one.