Microsoft OAuth Flaw Opens Azure Accounts to Takeover

The Microsoft applications are vulnerable to an OAuth authentication flaw that could enable Azure account takeover.
Source: Threadpost