Microsoft account-hijacking hole closed 48 hours after bug report

Token-harvesting attack meant one login could open doors to multiple Microsoft services

British researcher Jack Whitton has reported a Microsoft account hijacking authentication bug that would have been another arrow in an attacker's phishing quiver, save for the fact that Microsoft fixed it."