https://www.malaysiainternet.my/2021/09/new-azure-ad-bug-lets-hackers-brute-force-passwords-without-getting-caught/