John Novak: 0-Day in Azure B2C and an Account Takeover Chain

A DEF CON 31 talk on a chain of vulnerabilities in Microsoft Azure B2C that...