An open direct vulnerability in the Nespresso Web domain lets attackers bypass detection as they attempt to steal victims’ Microsoft credentials.
Source: htdarkreading.com