SECURITY BUG ALLOWS ANYONE TO SPOOF MICROSOFT EMPLOYEE EMAILS

Summary from the TLDR InfoSec newsletter

A researcher found an unpatched bug allowing anyone to impersonate Microsoft corporate email accounts for credible phishing attempts. He reported the email spoofing bug to Microsoft, but the company dismissed it after failing to reproduce the issue, so he then publicized the vulnerability on X.