
Attackers pose as IT support on Microsoft Teams to abuse AD CS
Attackers use social engineering via Microsoft Teams and insecure AD CS to steal company data.
9 stories, newest first · one card per story

Attackers use social engineering via Microsoft Teams and insecure AD CS to steal company data.

Microsoft Teams will warn users when Defender detects malicious URLs embedded in QR codes in messages.

Microsoft Teams will warn users when Defender finds malicious URLs hidden inside QR codes.

Microsoft Teams will integrate third-party signals to flag AI-generated audio and video in meetings from November 2026.

Microsoft Teams will integrate third-party deepfake detection and impersonation warnings for meetings, reaching general availability in November.
Teams meeting audio and roster stay reachable via ACS Call Automation after a participant is removed.

Microsoft patched CVE-2026-65812 in Teams for Android, an information-disclosure flaw that can leak credentials under specific conditions.

Microsoft Teams will obscure QR codes from external senders starting October 2026, adding friction against QR-code phishing across Android, desktop, iOS, and Mac.

Ontinue disclosed TWINLOOT, a Python implant hiding C2 in SharePoint dead drops and Teams TURN relays, harvesting credentials and pivoting via reverse SOCKS5.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views