Microsoft bug allows email spoofing, bypassing Outlook security, claims researcher

Microsoft corporate email accounts can be exploited by threat actors to send phishing emails, claims a security researcher. Vsevolod Kokorin, also known online as Slonser, wrote on X (formerly Twitter) that he has found a vulnerability that allows anyone to send a message from any user@domain.