TECH NEWS
Microsoft Password Reset Portal Can Leak Account Verification Details
Microsoft’s password-reset portal can be used to identify valid user accounts and, in some cases, reveal their registered password-reset verification methods without requiring authentication, according to research from LevelBlue SpiderLabs shared with Hackread.com. The finding involves Microsoft’s public Self-Service Password Reset (SSPR) portal, a legitimate service that