Within hours, security researcher Chase Dardaman figured out a way to use Microsoft's new feature to load the CoinHive in-browser miner through a custom JavaScript Excel function. GOT IT!

A public proof-of-concept (PoC) exploit has been released for the Microsoft Azure Active Directory credentials brute-forcing flaw discovered by Secureworks and first reported by Ars. The exploit ...