Access tokens for other Teams users can be recovered, allowing attackers to move from a single compromise to the ability to impersonate critical employees, but Microsoft isn’t planning to patch.
Read full article on Dark Reading
Token-Mining Weakness in Microsoft Teams Makes for Perfect Phish
- Cyberthreats linked to foreign actors aim to hinder Election Day proceedings
- DocuSign’s API used to lure victims into e-signing fake invoices
- Schneider Electric ransomware crew demands $125k paid in baguettes
- How to Become a Chief Information Officer: CIO Cheat Sheet
- Research: Extending corporate life of laptops by just one year can reduce harmful emissions by 25%