A bug allows impersonation of Microsoft corporate email accounts for phishing.
Microsoft dismissed bug report but later reopened one after public disclosure.
Bug affects sending emails to Outlook accounts, potentially impacting 400 million users globally.