LevelBlue found Microsoft’s password reset portal can reveal valid accounts, recovery methods and likely administrator accounts without user authentication.
First seen on hackread.com
Jump to article: hackread.com/microsoft-password-reset-portal-leak-account-details/
