Password resets are one of the easiest ways for attackers to bypass security controls. Specops Software shows how helpdesk social engineering turns a seemingly legitimate reset request into full account compromise. [...]
Regular Password Resets Aren’t as Safe as You Think
Summary + source link. No paywalls, no tracking.