He said Windows 365 failed to stop Mimikatz from extracting the Microsoft Azure email address and passwords, in plaintext, for logged-in users. The exploit took advantage of another security bug ...