Cybersecurity researchers have flagged a « critical » security vulnerability in Microsoft’s multi-factor authentication (MFA) implementation that allows an attacker to trivially sidestep the protection and gain unauthorized access to a victim’s account.
« The bypass was simple: it took around an hour to execute, required no user interaction and did not generate any notification or provide the
