Microsoft Exchange Autodiscover protocol found leaking hundreds of thousands of credentials

Email clients fail over to unexpected domains if they can't find the right resources
A flaw in Microsoft's Autodiscover protocol, used to configure Exchange clients like Outlook, can cause user credentials to leak to miscreants in certain circumstances.…