Design flaw has Microsoft Authenticator overwriting MFA accounts, locking users out | CSO Online