Security bug could have allowed anyone to spoof Microsoft employee emails

News Snapshot:

Security researchers recently claimed to have found a flaw that could allow threat actors to spoof Microsoft corporate emails. A cybersecurity researcher with the alias Slonser (full name Vsevolod Kokorin, according to TechCrunch ) recently posted on X with a telling screenshot that appeared to show an email seemingly coming from the security@microsoft.com email address. In the post, Slonser said that after tipping off Microsoft about the vulnerability, the company came back saying it couldn’t reproduce it. In other words - it didn’t find it relevant. The researcher then shared “a video with the exploitation, a full PoC” to which...