Download this episode
Microsoft Exchange and Outlook Web Access feature two-factor authentication. A password. A token. But turns out, the Web Services doesn't. And this means we can bypass 2FA. Here's the attack and defense.
Available formats for this video:
Actual format may change based on video formats available and browser capability.