AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
How Microsoft Authenticated Emails From Shared IP Space
Another researcher, Christoph Derry, posted something on LinkedIn that kind of broke down exactly what happened here. They were able to get through the system and they bounce it through a couple different systems. If you configure your SPF record to authorize Microsoft's entire IP range, then that means that any IP or server within that Microsoft IP range would be able to send an email as you granted they have all the other variables in place.