TLDR InfoSec · STRATEGIES & TACTICS
ACCOUNTS
Summary from the TLDR InfoSec newsletter
In a post-mortem report, Microsoft revealed how hackers stole a cryptographic consumer key and used it to forge tokens for Outlook.com and Outlook Web Access. The key was stolen from a software dump that was created when a Microsoft computer crashed. Microsoft has now fixed the bugs that allowed the breach to happen, but users should still be vigilant and take steps to protect their accounts.